Vulnerabilities for Partnerexpress (...) - CXSECURITY.COM

Vulnerabilities for 'Partnerexpress'

2021-11-16

CVE-2021-43046

NVD-CWE-noinfo

The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain an easily exploitable vulnerability that allows an unauthenticated attacker with network access to obtain session tokens for the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO PartnerExpress: versions 6.2.1 and below.

CVE-2021-43047

CWE-79

The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain easily exploitable Stored and Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker to social engineer a legitimate user with network access to execute scripts targeting the affected system or the victim's local system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO PartnerExpress: versions 6.2.1 and below.

CVE-2021-43048

CWE-1021

The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a clickjacking attack on the affected system. A successful attack using this vulnerability does not require human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO PartnerExpress: versions 6.2.1 and below.

2020-12-15

CVE-2020-27147

CWE-287

The REST API component of TIBCO Software Inc.'s TIBCO PartnerExpress contains a vulnerability that theoretically allows an unauthenticated attacker with network access to obtain an authenticated login URL for the affected system via a REST API. Affected releases are TIBCO Software Inc.'s TIBCO PartnerExpress: version 6.2.0.

>>> Vendor: Tibco 142 Products

Hawk monitoring agent

Enterprise message service

Smartsockets rtserver

Adapter files z os

Iprocess engine

Rendezvous datasecurity

Substantiation es

Mainframe service tracker

Activematrix businessworks service engine

Activematrix service bus

Activematrix service grid

Activematrix service performance manager

Activematrix bpm

Silver bpm service

Silver cap service

Collaborative information manager

Silver businessworks service

Iprocess workspace

Spotfire analytics server

Spotfire server

Managed file transfer command center

Managed file transfer internet server

Activematrix businessworks

Silver fabric activematrix service grid distribution

Spotfire professional

Web player automation services

Spotfire statistics services

Spotfire web player

Enterprise administrator

Enterprise administrator sdk

Messaging appliance

Automation services

Silver fabric enabler

Spotfire deployment kit

Activematrix management agent

Activematrix policy agent

Activematrix policy manager

Silver fabric enabler for spotfire webplayer

Spotfire analyst

Spotfire analytics platform for aws

Spotfire automation services

Spotfire desktop

Spotfire desktop language packs

Rendezvous network server

Enterprise message service appliance

Enterprise message service appliance firmware

Jasperreports server community edition

Jasperreports server for activematrix bpm

Jasperreports server

Jaspersoft for aws with multitenancy

Jaspersoft reporting and analytics for aws

Jasperreports library community edition

Jaspersoft studio for activematrix bpm

Jasperreports professional

Jaspersoft for aws with multi-tenancy

Jasperreports library for activematrix bpm

Jasperreports library

Jaspersoft reporting and analytics

Jaspersoft studio

Businessworks process monitor

Datasynapse gridserver manager

Data virtualization

Silver fabric enabler for spotfire web player

Spotfire connectors

Spotfire client

Spotfire web player client

Activematrix businessworks distribution for tibco silver fabric

Statistica server

Messaging - apache kafka distribution - schema repository

Rendezvous for z/linux

Rendezvous for z/os

Data science for aws

Spotfire data science

Activematrix business process management

Activematrix policy director

See all Products for Vendor Tibco

Copyright 2024, cxsecurity.com