GCVE - cpe:2.3:a:tibco:iprocess_engine:10.6.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:tibco:iprocess_engine:10.6.2:*:*:*:*:*:*:*

part: a version: 10.6.2 update: *

Vendor	Tibco (`92ae8683-1e4a-52cf-ae60-583c5fda0048`)
Product	Iprocess Engine (`560da3d0-15df-526f-a431-2f1ef5e8e2a7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-2021`	vulnerable	2026-06-08 04:58:03.470715	Details available Session fixation vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to hijack web sessions via unspecified vectors. Published: 2011-05-20T22:00:00.000Z Updated: 2024-08-06T22:46:00.920Z Open on db.gcve.eu Reference links http://www.tibco.com/services/support/advisories/iprocess-advisory_20110518.jsp https://exchange.xforce.ibmcloud.com/vulnerabilities/67538 http://www.securityfocus.com/bid/47921 http://osvdb.org/72554 http://www.vupen.com/english/advisories/2011/1272	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2020`	vulnerable	2026-06-08 04:58:03.462685	Details available Cross-site scripting (XSS) vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2011-05-20T22:00:00.000Z Updated: 2024-08-06T22:46:00.936Z Open on db.gcve.eu Reference links http://www.tibco.com/services/support/advisories/iprocess-advisory_20110518.jsp https://exchange.xforce.ibmcloud.com/vulnerabilities/67537 http://www.securityfocus.com/bid/47921 http://www.vupen.com/english/advisories/2011/1272 http://secunia.com/advisories/44639	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3338`	vulnerable	2026-06-08 04:50:34.317394	Details available Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent (TRA) before 5.6.0; iProcess Engine 10.3.0 through 10.6.2 and 11.0.0; and Mainframe Service Tracker before 1.1.0 might allow remote attackers to execute arbitrary code via a crafted message. Published: 2008-08-13T22:00:00.000Z Updated: 2024-08-07T09:37:26.835Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2008/2448 https://exchange.xforce.ibmcloud.com/vulnerabilities/44604 http://secunia.com/advisories/31618 http://www.securityfocus.com/bid/30836 http://www.tibco.com/resources/mk/hawk_security_advisory_20080729.txt	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.