CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 0CVE-2022-30574 – TIBCO eFTL Secret Jacking
https://notcve.org/view.php?id=CVE-2022-30574
09 Aug 2022 — The ftlserver component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition, TIBCO FTL - Enterprise Edition, TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, TIBCO eFTL - Enterprise Edition, and TIBCO eFTL - Enterprise Edition contains a difficult to exploit vulnerability that allows a low privileged attacker with local access to obtain user credentials to the affected system. Affected releases are TIBCO Software Inc.'s TIBCO F... • https://www.tibco.com/services/support/advisories •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0CVE-2021-43055 – TIBCO eFTL Token Caching Vulnerability
https://notcve.org/view.php?id=CVE-2021-43055
11 Jan 2022 — The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerability that allows clients to inherit the permissions of the client that initially connected on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO eFTL - Community Edition: versions 6.7.2 and below, TIBCO eFTL - Developer Edition: versions 6.7.2 and below, and TIBCO eFTL - Enterprise Edition: versions ... • https://www.tibco.com/services/support/advisories •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0CVE-2021-43054 – TIBCO eFTL Token Generation Vulnerability
https://notcve.org/view.php?id=CVE-2021-43054
11 Jan 2022 — The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerability that allows a low privileged attacker with network access to generate API tokens that can access any other channel with arbitrary permissions. Affected releases are TIBCO Software Inc.'s TIBCO eFTL - Community Edition: versions 6.7.2 and below, TIBCO eFTL - Developer Edition: versions 6.7.2 and below, and TIBCO eFT... • https://www.tibco.com/services/support/advisories •
CVSS: 7.5EPSS: 0%CPEs: 66EXPL: 0CVE-2021-35497 – TIBCO FTL unvalidated SAN in client certificates
https://notcve.org/view.php?id=CVE-2021-35497
05 Oct 2021 — The FTL Server (tibftlserver) and Docker images containing tibftlserver components of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, TIBCO ActiveSpaces - Developer Edition, TIBCO ActiveSpaces - Enterprise Edition, TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition, TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contain a vulnerability that theoretically allows a non-administrative, authenticated FTL... • https://www.tibco.com/services/support/advisories • CWE-295: Improper Certificate Validation •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0CVE-2021-28823 – TIBCO eFTL Windows Platform Installation vulnerability
https://notcve.org/view.php?id=CVE-2021-28823
23 Mar 2021 — The Windows Installation component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker with local access on some versions of the Windows operating system to insert malicious software. The affected component can be abused to execute the malicious software inserted by the attacker with the elevated privileges of the component. This vulnerability results from a l... • http://www.tibco.com/services/support/advisories • CWE-863: Incorrect Authorization •