GCVE - cpe:2.3:a:tibco:partnerexpress:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:tibco:partnerexpress:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Tibco (`92ae8683-1e4a-52cf-ae60-583c5fda0048`)
Product	Partnerexpress (`3278a0b4-45b8-5c67-b804-b8da85a7ab63`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-43048`	vulnerable	2026-06-08 05:35:23.124248	TIBCO PartnerExpress Click-Jacking vulnerability CRITICAL (9.8) The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a clickjacking attack on the affected system. A successful attack using this vulnerability does not require human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO PartnerExpress: versions 6.2.1 and below. Published: 2021-11-16T17:50:14.025Z Updated: 2024-09-17T03:27:29.314Z Open on db.gcve.eu Reference links https://www.tibco.com/services/support/advisories https://www.tibco.com/support/advisories/2021/11/tibco-security-advisory-november-16-2021-tibco-partnerexpress-2021-43048	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-43047`	vulnerable	2026-06-08 05:35:23.123864	TIBCO PartnerExpress Cross Site Scripting vulnerabilities CRITICAL (9) The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain easily exploitable Stored and Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker to social engineer a legitimate user with network access to execute scripts targeting the affected system or the victim's local system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO PartnerExpress: versions 6.2.1 and below. Published: 2021-11-16T17:50:12.472Z Updated: 2024-09-16T23:15:25.061Z Open on db.gcve.eu Reference links https://www.tibco.com/services/support/advisories https://www.tibco.com/support/advisories/2021/11/tibco-security-advisory-november-16-2021-tibco-partnerexpress-2021-43047	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-43046`	vulnerable	2026-06-08 05:35:23.123202	TIBCO PartnerExpress Session Token in URL HIGH (7.5) The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain an easily exploitable vulnerability that allows an unauthenticated attacker with network access to obtain session tokens for the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO PartnerExpress: versions 6.2.1 and below. Published: 2021-11-16T17:50:10.945Z Updated: 2024-09-16T18:54:31.908Z Open on db.gcve.eu Reference links https://www.tibco.com/services/support/advisories https://www.tibco.com/support/advisories/2021/11/tibco-security-advisory-november-16-2021-tibco-partnerexpress-2021-43046	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.