Skip to content

Product

tibco data virtualization vulnerabilities

4 published CVES affecting tibco data virtualization, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
4
Critical
0
High
1
Medium
3
Low
0
Unscored
0
CISA KEV
0

Latest tibco data virtualization CVEs

Newest publication first

  1. CVE-2022-30570 TIBCO Data Virtualization Access Control Vulnerability

    Published
    MediumCVSS 6.5 EPSS 0.72%

    The Column Based Security component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains an easily exploitable vulnerability that allows a low privileged attacker with network access to obtain read access to application inf...

  2. CVE-2021-35500 TIBCO Data Virtualization Arbitrary File Download vulnerability

    Published
    MediumCVSS 5.5 EPSS 0.58%

    The Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization, TIBCO Data Virtualization, TIBCO Data Virtualization, and TIBCO Data Virtualization for AWS Marketplace contains a difficult to exploit vulnerability that allows a low privileged attacker...

  3. CVE-2020-9415 TIBCO Data Virtualization

    Published
    MediumCVSS 6.5 EPSS 0.79%

    The TIBCO Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains a vulnerability that theoretically allows a malicious authenticated user to download any arbitrary file from the affected s...

  4. CVE-2018-5428 TIBCO Data Virtualization Command Injection Vulnerability

    Published
    HighCVSS 8.8 EPSS 2.9%

    The version control adapters component of TIBCO Data Virtualization (formerly known as Cisco Information Server) contains vulnerabilities that may allow for arbitrary command execution. Affected releases are TIBCO Data Virtualization: 7.0.5; 7.0.6.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.