Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-28828

Опубликовано: 20 апр. 2021
Источник: nvd
CVSS3: 7.6
CVSS3: 8.8
CVSS2: 6.5
EPSS Низкий

Описание

The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition for z/Linux, and TIBCO Administrator - Enterprise Edition for z/Linux contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a SQL injection attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition: versions 5.11.0 and 5.11.1, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric: versions 5.11.0 and 5.11.1, TIBCO Administrator - Enterprise

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:tibco:administrator:*:*:*:*:enterprise:*:*:*
Версия до 5.10.2 (включая)
cpe:2.3:a:tibco:administrator:*:*:*:*:enterprise:silver_fabric:*:*
Версия до 5.10.2 (включая)
cpe:2.3:a:tibco:administrator:*:*:*:*:enterprise:z\/linux:*:*
Версия до 5.10.2 (включая)
cpe:2.3:a:tibco:administrator:5.11.0:*:*:*:enterprise:*:*:*
cpe:2.3:a:tibco:administrator:5.11.0:*:*:*:enterprise:silver_fabric:*:*
cpe:2.3:a:tibco:administrator:5.11.0:*:*:*:enterprise:z\/linux:*:*
cpe:2.3:a:tibco:administrator:5.11.1:*:*:*:enterprise:*:*:*
cpe:2.3:a:tibco:administrator:5.11.1:*:*:*:enterprise:silver_fabric:*:*
cpe:2.3:a:tibco:administrator:5.11.1:*:*:*:enterprise:z\/linux:*:*

EPSS

Процентиль: 59%
0.00387
Низкий

7.6 High

CVSS3

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

github
больше 3 лет назад

The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition for z/Linux, and TIBCO Administrator - Enterprise Edition for z/Linux contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a SQL injection attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition: versions 5.11.0 and 5.11.1, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric: versions 5.11.0 and 5.11.1, TIBCO Administrator - Enterpr...

EPSS

Процентиль: 59%
0.00387
Низкий

7.6 High

CVSS3

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89