TIBCO Partnerexpress vulnerabilities

4 CVEs affecting TIBCO Partnerexpress, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-43048, published 2021-11-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-43048, published 2021-11-16. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain a vulnerability that theoretically allows an unauthenticated attacker with network access to…
CVE-2021-43046, published 2021-11-16. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain an easily exploitable vulnerability that allows an unauthenticated attacker with network access…
CVE-2021-43047, published 2021-11-16. Critical severity, CVSS 9.0. EPSS: 1% chance of exploitation in the next 30 days. The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain easily exploitable Stored and Reflected Cross Site Scripting (XSS) vulnerabilities that allow a…
CVE-2020-27147, published 2020-12-15. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. The REST API component of TIBCO Software Inc.'s TIBCO PartnerExpress contains a vulnerability that theoretically allows an unauthenticated attacker with network access to obtain an authenticated…