TIBCO Tibbr vulnerabilities

3 CVEs affecting TIBCO Tibbr, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-5534, published 2017-12-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-1414, published 2011-03-22. Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the tibbr web server, as used in TIBCO tibbr 1.0.0 through 1.5.0 and tibbr Service 1.0.0 through 1.5.0, allows remote attackers to inject arbitrary web…
CVE-2017-5534, published 2017-12-13. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. The tibbr user profiles components of tibbr Community, and tibbr Enterprise expose a weakness in an improperly sandboxed third-party component. Affected releases are TIBCO Software Inc. tibbr…
CVE-2017-5530, published 2017-12-13. High severity, CVSS 8.1. EPSS: 0.9% chance of exploitation in the next 30 days. The tibbr web server components of tibbr Community, and tibbr Enterprise contain SAML protocol handling errors which may allow authorized users to impersonate other users, and therefore escalate…