Tibco
Vulnerability activity for Tibco: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 1
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 2
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.
- 9.9CriticalMar 7, 2019TIBCO JasperReports Path traversal / file handlingCVE-2018-18809TIBCO JasperReports Library contains a directory-traversal vulnerability that may allow web server users to access contents of the host system.Added to KEV Dec 29, 2022 · 1,392 days after publicationExploited79% likelyExploit codeNucleiDetection
- 7.7HighApr 17, 2018TIBCO JasperReports Path traversal / file handlingCVE-2018-5430TIBCO JasperReports Server contain a vulnerability which may allow any authenticated user read-only access to the contents of the web application, including key configuration files.Added to KEV Dec 29, 2022 · 1,716 days after publicationExploited48% likelyExploit codeExploit-DBDetection
Recent
- 8.7HighSep 29, 2026Tibco Administrator Code / command injectionCVE-2026-4034Injection Vulnerability in Tibco Administrator version 5.13.0 & prior allows an authenticated user to submit specially crafted input through the web-based administration console.
- 9.8CriticalMar 17, 2026Tibco bpm enterprise Auth bypass / access controlCVE-2026-3207Configuration issue in Java Management Extensions (JMX) in TIBCO BPM Enterprise version 4.x allows unauthorised access.
- 7.7HighApr 17, 2018TIBCO JasperReports Path traversal / file handlingCVE-2018-5430TIBCO JasperReports Server contain a vulnerability which may allow any authenticated user read-only access to the contents of the web application, including key configuration files.Exploited48% likelyExploit codeExploit-DBDetection
- 9.9CriticalMar 7, 2019TIBCO JasperReports Path traversal / file handlingCVE-2018-18809TIBCO JasperReports Library contains a directory-traversal vulnerability that may allow web server users to access contents of the host system.Exploited79% likelyExploit codeNucleiDetection
Top products
- bpm enterprise1 CVE in the last year, 1 critical
- Administrator1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.