Managed File Transfer Command Center
Approved changes feed: RSS · Atom
cpe:2.3:a:tibco:managed_file_transfer_command_center:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Tibco (92ae8683-1e4a-52cf-ae60-583c5fda0048) |
|---|---|
| Product | Managed File Transfer Command Center (11bd344a-2a8a-58fe-9cd4-e8d4c7f05eec) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-22774 |
vulnerable | 2026-06-08 05:40:55.314826 |
TIBCO Managed File Transfer Command Center XXE Vulnerability
HIGH (8.6)
The DOM XML parser and SAX XML parser components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, TIBCO Managed File Transfer Command Center, TIBCO Managed File Transfer Internet Server, and TIBCO Managed File Transfer Internet Server contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to execute XML External Entity (XXE) attacks on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center: versions 8.3.1 and below, TIBCO Managed File Transfer Command Center: versions 8.4.0 and 8.4.1, TIBCO Managed File Transfer Internet Server: versions 8.3.1 and below, and TIBCO Managed File Transfer Internet Server: versions 8.4.0 and 8.4.1.
Published: 2022-05-10T17:00:20.130Z
Updated: 2024-09-16T20:43:11.558Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-9414 |
vulnerable | 2026-06-08 05:28:01.645032 |
TIBCO Managed File Transfer reflected XSS vulerability
HIGH (8.8)
The MFT admin service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center and TIBCO Managed File Transfer Internet Server contains a vulnerability that theoretically allows an authenticated user with specific permissions to obtain the session identifier of another user. The session identifier when replayed could provide administrative rights or file transfer permissions to the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center: versions 8.2.1 and below and TIBCO Managed File Transfer Internet Server: versions 8.2.1 and below.
Published: 2020-06-30T19:40:14.588Z
Updated: 2024-09-17T01:41:47.701Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-9413 |
vulnerable | 2026-06-08 05:28:01.643180 |
TIBCO Managed File Transfer reflected XSS vulerability
MEDIUM (6.3)
The MFT Browser file transfer client and MFT Browser admin client components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center and TIBCO Managed File Transfer Internet Server contain a vulnerability that theoretically allows an attacker to craft an URL that will execute arbitrary commands on the affected system. If the attacker convinces an authenticated user with a currently active session to enter or click on the URL the commands will be executed on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center: versions 8.2.1 and below and TIBCO Managed File Transfer Internet Server: versions 8.2.1 and below.
Published: 2020-06-30T19:40:14.183Z
Updated: 2024-09-17T01:07:05.625Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18810 |
vulnerable | 2026-06-08 05:11:14.769086 |
TIBCO Managed File Transfer Credentials Disclosure
MEDIUM (6.8)
The Administrator Service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, and TIBCO Managed File Transfer Internet Server contains vulnerabilities where an authenticated user with specific privileges can gain access to credentials to other systems. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center: versions up to and including 7.3.2; 8.0.0; 8.0.1; 8.0.2; 8.1.0, and TIBCO Managed File Transfer Internet Server: versions up to and including 7.3.2; 8.0.0; 8.0.1; 8.0.2; 8.1.0.
Published: 2018-12-11T20:00:00.000Z
Updated: 2024-09-17T01:32:00.588Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5711 |
vulnerable | 2026-06-08 05:06:50.782905 |
Details available
TIBCO Managed File Transfer Internet Server before 7.2.5, Managed File Transfer Command Center before 7.2.5, Slingshot before 1.9.4, and Vault before 2.0.1 allow remote authenticated users to obtain sensitive information via a crafted HTTP request.
Published: 2015-09-29T18:00:00.000Z
Updated: 2024-08-06T06:59:04.202Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-7194 |
vulnerable | 2026-06-08 05:05:58.899632 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2545 |
vulnerable | 2026-06-08 05:05:29.123892 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3424 |
vulnerable | 2026-06-08 04:59:25.503705 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3423 |
vulnerable | 2026-06-08 04:59:25.497398 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.