TIBCO Runtime Agent vulnerabilities

9 CVEs affecting TIBCO Runtime Agent, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-26219, published 2023-10-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-2830, published 2006-06-05. High severity, CVSS 7.5. EPSS: 6% chance of exploitation in the next 30 days. Buffer overflow in TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent (TRA) before 5.4, and Hawk before 4.6.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code…
CVE-2008-3338, published 2008-08-13. High severity, CVSS 10.0. EPSS: 4.8% chance of exploitation in the next 30 days. Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent (TRA) before 5.6.0; iProcess Engine 10.3.0…
CVE-2008-1703, published 2008-04-11. High severity, CVSS 9.3. EPSS: 4.8% chance of exploitation in the next 30 days. Multiple buffer overflows in TIBCO Software Rendezvous before 8.1.0, as used in multiple TIBCO products, allow remote attackers to execute arbitrary code via a crafted message.
CVE-2018-5434, published 2018-06-13. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. The TIBCO Designer component of TIBCO Software Inc.'s TIBCO Runtime Agent, and TIBCO Runtime Agent for z/Linux contains vulnerabilities wherein a malicious user could perform XML external entity…
CVE-2021-28827, published 2021-04-20. Critical severity, CVSS 9.6. EPSS: 1.1% chance of exploitation in the next 30 days. The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution for…
CVE-2006-2829, published 2006-06-05. Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days. Buffer overflow in Hawk Monitoring Agent (HMA) for TIBCO Hawk before 4.6.1 and TIBCO Runtime Agent (TRA) before 5.4 allows authenticated users to execute arbitrary code via the configuration for…
CVE-2023-26219, published 2023-10-25. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. The Hawk Console and Hawk Agent components of TIBCO Software Inc.'s TIBCO Hawk, TIBCO Hawk Distribution for TIBCO Silver Fabric, TIBCO Operational Intelligence Hawk RedTail, and TIBCO Runtime Agent…
CVE-2011-0649, published 2011-02-04. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in TIBCO Rendezvous 8.2.1 through 8.3.0, Enterprise Message Service (EMS) 5.1.0 through 6.0.0, Runtime Agent (TRA) 5.6.2 through 5.7.0, Silver BPM Service before…
CVE-2010-0184, published 2010-01-14. High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days. The (1) domainutility and (2) domainutilitycmd components in TIBCO Domain Utility in TIBCO Runtime Agent (TRA) before 5.6.2, as used in TIBCO ActiveMatrix BusinessWorks and other products, set weak…