CVSS: 4.0EPSS: 0%CPEs: 4EXPL: 0CVE-2015-5711
https://notcve.org/view.php?id=CVE-2015-5711
TIBCO Managed File Transfer Internet Server before 7.2.5, Managed File Transfer Command Center before 7.2.5, Slingshot before 1.9.4, and Vault before 2.0.1 allow remote authenticated users to obtain sensitive information via a crafted HTTP request. Vulnerabilidad en TIBCO Managed File Transfer Internet Server en versiones anteriores a 7.2.5, Managed File Transfer Command Center en versiones anteriores a 7.2.5, Slingshot en versiones anteriores a 1.9.4 y Vault en versiones anteriores a 2.0.1, permite a usuarios remotos autenticados obtener información sensible a través de una petición HTTP manipulada. • http://www.securitytracker.com/id/1033678 http://www.tibco.com/assets/blt423f06fbac6ee0c6/2015-003-advisory.txt http://www.tibco.com/mk/advisory.jsp • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.4EPSS: 0%CPEs: 4EXPL: 0CVE-2014-7194
https://notcve.org/view.php?id=CVE-2014-7194
TIBCO Managed File Transfer Internet Server before 7.2.4, Managed File Transfer Command Center before 7.2.4, Slingshot before 1.9.3, and Vault before 1.1.1 allow remote attackers to obtain sensitive information or modify data by leveraging agent access. TIBCO Managed File Transfer Internet Server anterior a 7.2.4, Managed File Transfer Command Center anterior a 7.2.4, Slingshot anterior a 1.9.3, y Vault anterior a 1.1.1 permite a atacantes remotos obtener información sensible o modificar datos aprovechandose del acceso de agentes. • http://www.tibco.com/assets/blt7454ec3ae638d8c4/mft-advisory-20141029-008.txt http://www.tibco.com/mk/advisory.jsp • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 5.0EPSS: 0%CPEs: 17EXPL: 0CVE-2014-2545
https://notcve.org/view.php?id=CVE-2014-2545
TIBCO Managed File Transfer Internet Server before 7.2.2, Managed File Transfer Command Center before 7.2.2, Slingshot before 1.9.1, and Vault before 1.0.1 allow remote attackers to obtain sensitive information via a crafted HTTP request. TIBCO Managed File Transfer Internet Server anterior a 7.2.2, Managed File Transfer Command Center anterior a 7.2.2, Slingshot anterior a 1.9.1 y Vault anterior a 1.0.1 permiten a atacantes remotos obtener información sensible a través de una solicitud HTTP manipulada. • http://www.tibco.com/mk/advisory.jsp http://www.tibco.com/multimedia/mft_advisory_20140429_tcm8-21013.txt • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.3EPSS: 0%CPEs: 9EXPL: 0CVE-2011-3424
https://notcve.org/view.php?id=CVE-2011-3424
Session fixation vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed File Transfer Command Center before 7.1.1, and the server in TIBCO Slingshot before 1.8.1, allows remote attackers to hijack web sessions via unspecified vectors. Vulnerabilidad de fijación de sesión en el servidor Managed File Transfer en Managed File Transfer Internet Server antes de v7.1.1 y Managed File Transfer Command Center antes de v7.1.1, y el servidor TIBCO Slingshot antes de v1.8.1, permite a atacantes remotos secuestrar sesiones web a través de vectores no especificados. • http://secunia.com/advisories/45976 http://securitytracker.com/id?1026051 http://www.osvdb.org/75397 http://www.securityfocus.com/bid/49619 http://www.tibco.com/multimedia/mft-slingshot_advisory_20110913_tcm8-14340.txt http://www.tibco.com/services/support/advisories/mft-slingshot-advisory_20110913.jsp https://exchange.xforce.ibmcloud.com/vulnerabilities/69805 •
CVSS: 4.3EPSS: 0%CPEs: 9EXPL: 0CVE-2011-3423
https://notcve.org/view.php?id=CVE-2011-3423
Cross-site scripting (XSS) vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed File Transfer Command Center before 7.1.1, and the server in TIBCO Slingshot before 1.8.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad ejecución de secuencias de comandos en sitios cruzados (XSS) en el servidor Managed File Transfer en Managed File Transfer Internet Server antes de v7.1.1 y Managed File Transfer Command Center antes de v7.1.1, y el servidor TIBCO Slingshot antes de v1.8.1, permite a atacantes remotos ejecutar secuencias de comandos web o HTML a través de vectores no especificados. • http://secunia.com/advisories/45976 http://securitytracker.com/id?1026051 http://www.osvdb.org/75396 http://www.securityfocus.com/bid/49619 http://www.tibco.com/multimedia/mft-slingshot_advisory_20110913_tcm8-14340.txt http://www.tibco.com/services/support/advisories/mft-slingshot-advisory_20110913.jsp https://exchange.xforce.ibmcloud.com/vulnerabilities/69806 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •