TIBCO Hawk vulnerabilities

7 CVEs affecting TIBCO Hawk, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-3182, published 2024-05-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-2830, published 2006-06-05. High severity, CVSS 7.5. EPSS: 6% chance of exploitation in the next 30 days. Buffer overflow in TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent (TRA) before 5.4, and Hawk before 4.6.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code…
CVE-2008-3338, published 2008-08-13. High severity, CVSS 10.0. EPSS: 4.8% chance of exploitation in the next 30 days. Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent (TRA) before 5.6.0; iProcess Engine 10.3.0…
CVE-2008-1703, published 2008-04-11. High severity, CVSS 9.3. EPSS: 4.8% chance of exploitation in the next 30 days. Multiple buffer overflows in TIBCO Software Rendezvous before 8.1.0, as used in multiple TIBCO products, allow remote attackers to execute arbitrary code via a crafted message.
CVE-2006-2829, published 2006-06-05. Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days. Buffer overflow in Hawk Monitoring Agent (HMA) for TIBCO Hawk before 4.6.1 and TIBCO Runtime Agent (TRA) before 5.4 allows authenticated users to execute arbitrary code via the configuration for…
CVE-2022-41564, published 2023-02-14. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. The Hawk Console component of TIBCO Software Inc.'s TIBCO Hawk and TIBCO Operational Intelligence Hawk RedTail contains a vulnerability that will return the EMS transport password and EMS SSL…
CVE-2023-26219, published 2023-10-25. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. The Hawk Console and Hawk Agent components of TIBCO Software Inc.'s TIBCO Hawk, TIBCO Hawk Distribution for TIBCO Silver Fabric, TIBCO Operational Intelligence Hawk RedTail, and TIBCO Runtime Agent…
CVE-2024-3182, published 2024-05-15. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. Install-type password disclosure vulnerability in Universal Installer including the Silent Installer in TIBCO Hawk versions 6.2.0, 6.2.1, 6.2.2 and 6.2.3 allows user's Enterprise Message Service…