TIBCO Iprocess Engine vulnerabilities

5 CVEs affecting TIBCO Iprocess Engine, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-2021, published 2011-05-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-1704, published 2008-04-11. High severity, CVSS 10.0. EPSS: 5.4% chance of exploitation in the next 30 days. Multiple buffer overflows in TIBCO Software Enterprise Message Service (EMS) before 4.4.3, and iProcess Engine 10.6.0 through 10.6.1, allow remote attackers to execute arbitrary code via a crafted…
CVE-2008-3338, published 2008-08-13. High severity, CVSS 10.0. EPSS: 4.8% chance of exploitation in the next 30 days. Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent (TRA) before 5.6.0; iProcess Engine 10.3.0…
CVE-2008-1703, published 2008-04-11. High severity, CVSS 9.3. EPSS: 4.8% chance of exploitation in the next 30 days. Multiple buffer overflows in TIBCO Software Rendezvous before 8.1.0, as used in multiple TIBCO products, allow remote attackers to execute arbitrary code via a crafted message.
CVE-2011-2021, published 2011-05-20. Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days. Session fixation vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to hijack web sessions via unspecified vectors.
CVE-2011-2020, published 2011-05-20. Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified…