CVE-2017-5534

Published: Dic 13, 2017 Last Modified: Apr 20, 2025 EU-VD ID: EUVD-2017-14637 Aliases: GSD-2017-5534
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 8,8
Attack Vector: network
Attack Complexity: low
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
HIGH 9,0
Access Vector: network
Access Complexity: low
Authentication: single
Confidentiality: complete
Integrity: complete
Availability: complete

Description

AI Translation Available

The tibbr user profiles components of tibbr Community, and tibbr Enterprise expose a weakness in an improperly sandboxed third-party component. Affected releases are TIBCO Software Inc. tibbr Community 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0, tibbr Enterprise 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0046
Percentile
0,6th
Updated

EPSS Score Trend (Last 90 Days)

Application

Tibbr by Tibco

Version Range Affected
To 5.2.1 (inclusive)
cpe:2.3:a:tibco:tibbr:*:*:*:*:enterprise:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Tibbr by Tibco

cpe:2.3:a:tibco:tibbr:6.0.1:*:*:*:enterprise:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Tibbr by Tibco

Version Range Affected
To 5.2.1 (inclusive)
cpe:2.3:a:tibco:tibbr:*:*:*:*:community:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Tibbr by Tibco

cpe:2.3:a:tibco:tibbr:6.0.0:*:*:*:enterprise:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Tibbr by Tibco

cpe:2.3:a:tibco:tibbr:6.0.1:*:*:*:community:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Tibbr by Tibco

cpe:2.3:a:tibco:tibbr:6.0.0:*:*:*:community:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Tibbr by Tibco

cpe:2.3:a:tibco:tibbr:7.0.0:*:*:*:enterprise:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Tibbr by Tibco

cpe:2.3:a:tibco:tibbr:7.0.0:*:*:*:community:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://www.tibco.com/support/advisories/2017/12/tibco-security-advisory-decemb…
https://www.tibco.com/support/advisories/2017/12/tibco-security-advisory-decemb…