CVE-2021-43054: TIBCO Eftl

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerability that allows a low privileged attacker with network access to generate API tokens that can access any other channel with arbitrary permissions. Affected releases are TIBCO Software Inc.'s TIBCO eFTL - Community Edition: versions 6.7.2 and below, TIBCO eFTL - Developer Edition: versions 6.7.2 and below, and TIBCO eFTL - Enterprise Edition: versions 6.7.2 and below.

Affected products

• TIBCO Eftl: up to and including 6.7.2

Published 2022-01-11. Last modified 2026-06-17.