Enterprise Message Service
Approved changes feed: RSS · Atom
cpe:2.3:a:tibco:enterprise_message_service:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Tibco (92ae8683-1e4a-52cf-ae60-583c5fda0048) |
|---|---|
| Product | Enterprise Message Service (9dcfef4b-e563-5a33-9b10-c86092b27a50) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-12415 |
vulnerable | 2026-06-08 05:10:41.538795 |
TIBCO Enterprise Message Service Vulnerable to CSRF Attacks
HIGH (7.5)
The Central Administration server (emsca) component of TIBCO Software Inc.'s TIBCO Enterprise Message Service, TIBCO Enterprise Message Service - Community Edition, and TIBCO Enterprise Message Service - Developer Edition contains a vulnerability which may allow an attacker to perform cross-site request forgery (CSRF) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Enterprise Message Service: versions 8.4.0 and below, TIBCO Enterprise Message Service - Community Edition: versions 8.4.0 and below, and TIBCO Enterprise Message Service - Developer Edition: versions 8.4.0 and below.
Published: 2018-11-07T00:00:00.000Z
Updated: 2024-09-16T20:22:46.057Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-3628 |
vulnerable | 2026-06-08 05:07:45.708930 |
Details available
Buffer overflow in tibemsd in the server in TIBCO Enterprise Message Service (EMS) before 8.3.0 and EMS Appliance before 2.4.0 allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via crafted inbound data.
Published: 2016-04-20T10:00:00.000Z
Updated: 2024-08-06T00:03:34.410Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1291 |
vulnerable | 2026-06-08 04:51:14.355417 |
Details available
Stack-based buffer overflow in TIBCO SmartSockets before 6.8.2, SmartSockets Product Family (aka RTworks) before 4.0.5, and Enterprise Message Service (EMS) 4.0.0 through 5.1.1, as used in SmartSockets Server and RTworks Server (aka RTserver), SmartSockets client libraries and add-on products, RTworks libraries and components, EMS Server (aka tibemsd), SmartMQ, iProcess Engine, ActiveMatrix products, and CA Enterprise Communicator, allows remote attackers to execute arbitrary code via "inbound data," as demonstrated by requests to the UDP interface of the RTserver component, and data injection into the TCP stream to tibemsd.
Published: 2009-04-30T20:00:00.000Z
Updated: 2024-08-07T05:04:49.479Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1704 |
vulnerable | 2026-06-08 04:50:21.580654 |
Details available
Multiple buffer overflows in TIBCO Software Enterprise Message Service (EMS) before 4.4.3, and iProcess Engine 10.6.0 through 10.6.1, allow remote attackers to execute arbitrary code via a crafted message to the EMS server.
Published: 2008-04-11T10:00:00.000Z
Updated: 2024-08-07T08:32:01.297Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-5657 |
vulnerable | 2026-06-08 04:50:06.651615 |
Details available
TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to execute arbitrary code via crafted requests containing values that are used as pointer offsets.
Published: 2008-01-16T02:00:00.000Z
Updated: 2024-08-07T15:39:13.578Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-5655 |
vulnerable | 2026-06-08 04:50:06.646536 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.