Vulnerabilities (CVE)

Filtered by vendor Tibco Subscribe
Filtered by product Ebx Add-ons
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-26217 1 Tibco 1 Ebx Add-ons 2023-07-28 N/A 8.8 HIGH
The Data Exchange Add-on component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged user with import permissions and network access to the EBX server to execute arbitrary SQL statements on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 4.5.17 and below, versions 5.6.2 and below, version 6.1.0.
CVE-2020-27148 1 Tibco 1 Ebx Add-ons 2021-01-14 5.5 MEDIUM 7.1 HIGH
The TIBCO EBX Add-on for Oracle Hyperion EPM, TIBCO EBX Data Exchange Add-on, and TIBCO EBX Insight Add-on components of TIBCO Software Inc.'s TIBCO EBX Add-ons contain a vulnerability that theoretically allows a low privileged attacker with network access to execute an XML External Entity (XXE) attack. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 4.4.2 and below.