# Tibco vulnerabilities > Tibco has 225 published vulnerabilities across 181 products in our catalogue. 2 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Spotfire Server, with 28. If you run Tibco software, patch the exploited flaws first. Canonical page: https://www.precursorintelligence.com/vendors/tibco ## At a glance - **Published vulnerabilities:** 225 - **Known to be exploited:** 2 - **Products:** 181 - **Versions:** 1,343 - **Most recently added to the known-exploited list:** [CVE-2018-5430](https://www.precursorintelligence.com/what-is/cve-2018-5430), 29 December 2022. We keep watching the list. ## Which Tibco products have the most vulnerabilities? - [Spotfire Server](https://www.precursorintelligence.com/product/tibco/spotfire_server): 28 published vulnerabilities, 114 versions - [Jasperreports Server](https://www.precursorintelligence.com/product/tibco/jasperreports_server): 22 published vulnerabilities, 33 versions - [Spotfire Analytics Platform for Aws](https://www.precursorintelligence.com/product/tibco/spotfire_analytics_platform_for_aws): 20 published vulnerabilities, 16 versions - [Rendezvous](https://www.precursorintelligence.com/product/tibco/rendezvous): 16 published vulnerabilities, 18 versions - [Spotfire Analyst](https://www.precursorintelligence.com/product/tibco/spotfire_analyst): 12 published vulnerabilities, 70 versions - [Enterprise Message Service](https://www.precursorintelligence.com/product/tibco/enterprise_message_service): 11 published vulnerabilities, 30 versions - [Jaspersoft](https://www.precursorintelligence.com/product/tibco/jaspersoft): 10 published vulnerabilities, 4 versions - [Managed File Transfer Command Center](https://www.precursorintelligence.com/product/tibco/managed_file_transfer_command_center): 10 published vulnerabilities, 29 versions - [Spotfire Desktop](https://www.precursorintelligence.com/product/tibco/spotfire_desktop): 10 published vulnerabilities, 56 versions - [Jaspersoft Reporting and Analytics](https://www.precursorintelligence.com/product/tibco/jaspersoft_reporting_and_analytics): 10 published vulnerabilities, 14 versions Each product page lists its own known-exploited flaws. ## Which Tibco vulnerabilities are being exploited? 2 flaws are on the government list of vulnerabilities known to be exploited, newest first: - [CVE-2018-5430](https://www.precursorintelligence.com/what-is/cve-2018-5430): TIBCO JasperReports Server Information Disclosure Vulnerability. High, CVSS 8.8, chance of use in 30 days 48%, known exploited since 29 December 2022. - [CVE-2018-18809](https://www.precursorintelligence.com/what-is/cve-2018-18809): TIBCO JasperReports Library Directory Traversal Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 79%, known exploited since 29 December 2022. ## Which Tibco flaws are most likely to be used? Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days): - [CVE-2018-18809](https://www.precursorintelligence.com/what-is/cve-2018-18809): 79%, Medium (CVSS 6.5), known exploited - [CVE-2018-5430](https://www.precursorintelligence.com/what-is/cve-2018-5430): 48%, High (CVSS 8.8), known exploited - [CVE-2009-1291](https://www.precursorintelligence.com/what-is/cve-2009-1291): 6.4%, Critical (CVSS 10.0) - [CVE-2007-5658](https://www.precursorintelligence.com/what-is/cve-2007-5658): 6.4%, Critical (CVSS 10.0) - [CVE-2006-2830](https://www.precursorintelligence.com/what-is/cve-2006-2830): 6.0%, High (CVSS 7.5) - [CVE-2007-5655](https://www.precursorintelligence.com/what-is/cve-2007-5655): 5.5%, Critical (CVSS 10.0) - [CVE-2007-5657](https://www.precursorintelligence.com/what-is/cve-2007-5657): 5.5%, Critical (CVSS 10.0) - [CVE-2007-5656](https://www.precursorintelligence.com/what-is/cve-2007-5656): 5.4%, Critical (CVSS 10.0) - [CVE-2020-9410](https://www.precursorintelligence.com/what-is/cve-2020-9410): 5.4%, High (CVSS 8.8) - [CVE-2008-1704](https://www.precursorintelligence.com/what-is/cve-2008-1704): 5.4%, Critical (CVSS 10.0) ## All Tibco products we track 130 products with at least one tracked version, most vulnerabilities first: - [Spotfire Server](https://www.precursorintelligence.com/product/tibco/spotfire_server): 28 vulnerabilities, 114 versions - [Jasperreports Server](https://www.precursorintelligence.com/product/tibco/jasperreports_server): 22 vulnerabilities, 33 versions - [Spotfire Analytics Platform for Aws](https://www.precursorintelligence.com/product/tibco/spotfire_analytics_platform_for_aws): 20 vulnerabilities, 16 versions - [Rendezvous](https://www.precursorintelligence.com/product/tibco/rendezvous): 16 vulnerabilities, 18 versions - [Spotfire Analyst](https://www.precursorintelligence.com/product/tibco/spotfire_analyst): 12 vulnerabilities, 70 versions - [Enterprise Message Service](https://www.precursorintelligence.com/product/tibco/enterprise_message_service): 11 vulnerabilities, 30 versions - [Jaspersoft](https://www.precursorintelligence.com/product/tibco/jaspersoft): 10 vulnerabilities, 4 versions - [Managed File Transfer Command Center](https://www.precursorintelligence.com/product/tibco/managed_file_transfer_command_center): 10 vulnerabilities, 29 versions - [Spotfire Desktop](https://www.precursorintelligence.com/product/tibco/spotfire_desktop): 10 vulnerabilities, 56 versions - [Jaspersoft Reporting and Analytics](https://www.precursorintelligence.com/product/tibco/jaspersoft_reporting_and_analytics): 10 vulnerabilities, 14 versions - [Managed File Transfer Internet Server](https://www.precursorintelligence.com/product/tibco/managed_file_transfer_internet_server): 10 vulnerabilities, 25 versions - [Runtime Agent](https://www.precursorintelligence.com/product/tibco/runtime_agent): 9 vulnerabilities, 21 versions - [Ebx](https://www.precursorintelligence.com/product/tibco/ebx): 9 vulnerabilities, 121 versions - [Ebx Add-Ons](https://www.precursorintelligence.com/product/tibco/ebx_add-ons): 9 vulnerabilities, 39 versions - [Ftl](https://www.precursorintelligence.com/product/tibco/ftl): 9 vulnerabilities, 31 versions - [Activematrix Service Bus](https://www.precursorintelligence.com/product/tibco/activematrix_service_bus): 8 vulnerabilities, 15 versions - [Spotfire Deployment Kit](https://www.precursorintelligence.com/product/tibco/spotfire_deployment_kit): 8 vulnerabilities, 59 versions - [Activematrix Bpm](https://www.precursorintelligence.com/product/tibco/activematrix_bpm): 8 vulnerabilities, 6 versions - [Activematrix Service Grid](https://www.precursorintelligence.com/product/tibco/activematrix_service_grid): 8 vulnerabilities, 17 versions - [Spotfire Analytics Platform](https://www.precursorintelligence.com/product/tibco/spotfire_analytics_platform): 7 vulnerabilities, 11 versions - [Silver Fabric Enabler](https://www.precursorintelligence.com/product/tibco/silver_fabric_enabler): 7 vulnerabilities, 6 versions - [Spotfire Statistics Services](https://www.precursorintelligence.com/product/tibco/spotfire_statistics_services): 7 vulnerabilities, 36 versions - [Administrator](https://www.precursorintelligence.com/product/tibco/administrator): 6 vulnerabilities, 14 versions - [Hawk](https://www.precursorintelligence.com/product/tibco/hawk): 6 vulnerabilities, 7 versions - [Spotfire Desktop Language Packs](https://www.precursorintelligence.com/product/tibco/spotfire_desktop_language_packs): 6 vulnerabilities, 15 versions - [Eftl](https://www.precursorintelligence.com/product/tibco/eftl): 5 vulnerabilities, 9 versions - [Activematrix Businessworks Service Engine](https://www.precursorintelligence.com/product/tibco/activematrix_businessworks_service_engine): 5 vulnerabilities, 10 versions - [Jasperreports Library](https://www.precursorintelligence.com/product/tibco/jasperreports_library): 5 vulnerabilities, 26 versions - [Rtworks](https://www.precursorintelligence.com/product/tibco/rtworks): 5 vulnerabilities, 2 versions - [Slingshot](https://www.precursorintelligence.com/product/tibco/slingshot): 5 vulnerabilities, 9 versions - [Smartsockets Rtserver](https://www.precursorintelligence.com/product/tibco/smartsockets_rtserver): 5 vulnerabilities, 1 version - [Iprocess Engine](https://www.precursorintelligence.com/product/tibco/iprocess_engine): 5 vulnerabilities, 15 versions - [Spotfire Web Player](https://www.precursorintelligence.com/product/tibco/spotfire_web_player): 5 vulnerabilities, 37 versions - [Spotfire Professional](https://www.precursorintelligence.com/product/tibco/spotfire_professional): 4 vulnerabilities, 22 versions - [Enterprise Runtime for R](https://www.precursorintelligence.com/product/tibco/enterprise_runtime_for_r): 4 vulnerabilities, 10 versions - [Businessconnect](https://www.precursorintelligence.com/product/tibco/businessconnect): 4 vulnerabilities, 4 versions - [Data Virtualization](https://www.precursorintelligence.com/product/tibco/data_virtualization): 4 vulnerabilities, 11 versions - [Spotfire Analytics Server](https://www.precursorintelligence.com/product/tibco/spotfire_analytics_server): 4 vulnerabilities, 2 versions - [Partnerexpress](https://www.precursorintelligence.com/product/tibco/partnerexpress): 4 vulnerabilities, 4 versions - [Nimbus](https://www.precursorintelligence.com/product/tibco/nimbus): 4 vulnerabilities, 20 versions - [Silver Fabric Activematrix Service Grid Distribution](https://www.precursorintelligence.com/product/tibco/silver_fabric_activematrix_service_grid_distribution): 3 vulnerabilities, 2 versions - [Managed File Transfer Platform Server](https://www.precursorintelligence.com/product/tibco/managed_file_transfer_platform_server): 3 vulnerabilities, 6 versions - [Data Virtualization for Aws Marketplace](https://www.precursorintelligence.com/product/tibco/data_virtualization_for_aws_marketplace): 3 vulnerabilities, 2 versions - [Product and Service Catalog Powered by Tibco Ebx](https://www.precursorintelligence.com/product/tibco/product_and_service_catalog_powered_by_tibco_ebx): 3 vulnerabilities, 4 versions - [Businessconnect Trading Community Management](https://www.precursorintelligence.com/product/tibco/businessconnect_trading_community_management): 3 vulnerabilities, 2 versions - [Spotfire Data Science](https://www.precursorintelligence.com/product/tibco/spotfire_data_science): 3 vulnerabilities, 2 versions - [Datasynapse Gridserver Manager](https://www.precursorintelligence.com/product/tibco/datasynapse_gridserver_manager): 3 vulnerabilities, 15 versions - [Data Science for Aws](https://www.precursorintelligence.com/product/tibco/data_science_for_aws): 3 vulnerabilities, 2 versions - [Tibbr](https://www.precursorintelligence.com/product/tibco/tibbr): 3 vulnerabilities, 13 versions - [Activematrix Policy Director](https://www.precursorintelligence.com/product/tibco/activematrix_policy_director): 3 vulnerabilities, 4 versions - [Activematrix Businessworks](https://www.precursorintelligence.com/product/tibco/activematrix_businessworks): 3 vulnerabilities, 9 versions - [Vault](https://www.precursorintelligence.com/product/tibco/vault): 3 vulnerabilities, 5 versions - [Activespaces](https://www.precursorintelligence.com/product/tibco/activespaces): 3 vulnerabilities, 13 versions - [Spotfire Automation Services](https://www.precursorintelligence.com/product/tibco/spotfire_automation_services): 2 vulnerabilities, 26 versions - [Bpm Enterprise](https://www.precursorintelligence.com/product/tibco/bpm_enterprise): 2 vulnerabilities, 3 versions - [Spotfire Connectors](https://www.precursorintelligence.com/product/tibco/spotfire_connectors): 2 vulnerabilities, 4 versions - [Rendezvous Network Server](https://www.precursorintelligence.com/product/tibco/rendezvous_network_server): 2 vulnerabilities, 5 versions - [Silver Cap Service](https://www.precursorintelligence.com/product/tibco/silver_cap_service): 2 vulnerabilities, 1 version - [Data Science - Workbench](https://www.precursorintelligence.com/product/tibco/data_science_-_workbench): 2 vulnerabilities, 4 versions - [Silver Fabric](https://www.precursorintelligence.com/product/tibco/silver_fabric): 2 vulnerabilities, 8 versions - [Activematrix Business Process Management](https://www.precursorintelligence.com/product/tibco/activematrix_business_process_management): 2 vulnerabilities, 1 version - [Bpm Enterprise Distribution for Silver Fabric](https://www.precursorintelligence.com/product/tibco/bpm_enterprise_distribution_for_silver_fabric): 2 vulnerabilities, 3 versions - [Iway Service Manager](https://www.precursorintelligence.com/product/tibco/iway_service_manager): 2 vulnerabilities, 2 versions - [Iprocess Workspace](https://www.precursorintelligence.com/product/tibco/iprocess_workspace): 2 vulnerabilities, 3 versions - [Statistica](https://www.precursorintelligence.com/product/tibco/statistica): 2 vulnerabilities, 7 versions - [Substation Es](https://www.precursorintelligence.com/product/tibco/substation_es): 2 vulnerabilities, 10 versions - [Silver Bpm Service](https://www.precursorintelligence.com/product/tibco/silver_bpm_service): 2 vulnerabilities, 1 version - [Operational Intelligence Hawk Redtail](https://www.precursorintelligence.com/product/tibco/operational_intelligence_hawk_redtail): 2 vulnerabilities, 6 versions - [Jaspersoft Studio](https://www.precursorintelligence.com/product/tibco/jaspersoft_studio): 2 vulnerabilities, 15 versions - [API Exchange Gateway](https://www.precursorintelligence.com/product/tibco/api_exchange_gateway): 2 vulnerabilities, 9 versions - [Loglogic St4035 Firmware](https://www.precursorintelligence.com/product/tibco/loglogic_st4035_firmware): 1 vulnerability, 1 version - [Master Data Management](https://www.precursorintelligence.com/product/tibco/master_data_management): 1 vulnerability, 9 versions - [Messaging - Apache Kafka Distribution - Schema Repository](https://www.precursorintelligence.com/product/tibco/messaging_-_apache_kafka_distribution_-_schema_repository): 1 vulnerability, 1 version - [Messaging - Eclipse Mosquitto Distribution - Bridge](https://www.precursorintelligence.com/product/tibco/messaging_-_eclipse_mosquitto_distribution_-_bridge): 1 vulnerability, 1 version - [Messaging - Eclipse Mosquitto Distribution - Core](https://www.precursorintelligence.com/product/tibco/messaging_-_eclipse_mosquitto_distribution_-_core): 1 vulnerability, 4 versions - [Patterns - Search](https://www.precursorintelligence.com/product/tibco/patterns_-_search): 1 vulnerability, 7 versions - Rendezvous for Z/linux: 1 vulnerability, 11 versions - Rendezvous for Z/os: 1 vulnerability, 11 versions - [Silver Businessworks Service](https://www.precursorintelligence.com/product/tibco/silver_businessworks_service): 1 vulnerability, 1 version - [Silver Fabric Enabler for Spotfire Web Player](https://www.precursorintelligence.com/product/tibco/silver_fabric_enabler_for_spotfire_web_player): 1 vulnerability, 6 versions - [Silver Fabric Enabler for Spotfire Webplayer](https://www.precursorintelligence.com/product/tibco/silver_fabric_enabler_for_spotfire_webplayer): 1 vulnerability, 1 version - [Silver Mobile](https://www.precursorintelligence.com/product/tibco/silver_mobile): 1 vulnerability, 2 versions - [Smartsockets](https://www.precursorintelligence.com/product/tibco/smartsockets): 1 vulnerability, 2 versions - [Spotfire Enterprise Runtime for R](https://www.precursorintelligence.com/product/tibco/spotfire_enterprise_runtime_for_r): 1 vulnerability, 7 versions - [Statistica Server](https://www.precursorintelligence.com/product/tibco/statistica_server): 1 vulnerability, 2 versions - [Tibbr Service](https://www.precursorintelligence.com/product/tibco/tibbr_service): 1 vulnerability, 3 versions - [Activematrix Businessworks Distribution for Tibco Silver Fabric](https://www.precursorintelligence.com/product/tibco/activematrix_businessworks_distribution_for_tibco_silver_fabric): 1 vulnerability, 1 version - [Activematrix Management Agent](https://www.precursorintelligence.com/product/tibco/activematrix_management_agent): 1 vulnerability, 3 versions - [Activematrix Policy Agent](https://www.precursorintelligence.com/product/tibco/activematrix_policy_agent): 1 vulnerability, 3 versions - [Activematrix Policy Manager](https://www.precursorintelligence.com/product/tibco/activematrix_policy_manager): 1 vulnerability, 3 versions - [API Exchange Gateway Distribution](https://www.precursorintelligence.com/product/tibco/api_exchange_gateway_distribution): 1 vulnerability, 6 versions - [Auditsafe](https://www.precursorintelligence.com/product/tibco/auditsafe): 1 vulnerability, 2 versions - [Automation Services](https://www.precursorintelligence.com/product/tibco/automation_services): 1 vulnerability, 6 versions - [Businessevents](https://www.precursorintelligence.com/product/tibco/businessevents): 1 vulnerability, 6 versions - [Businessworks Buildpack](https://www.precursorintelligence.com/product/tibco/businessworks_buildpack): 1 vulnerability, 6 versions - [Deployment Kit](https://www.precursorintelligence.com/product/tibco/deployment_kit): 1 vulnerability, 6 versions - [Enterprise Administrator](https://www.precursorintelligence.com/product/tibco/enterprise_administrator): 1 vulnerability, 2 versions - [Enterprise Administrator SDK](https://www.precursorintelligence.com/product/tibco/enterprise_administrator_sdk): 1 vulnerability, 2 versions - [Enterprise Message Service Appliance Firmware](https://www.precursorintelligence.com/product/tibco/enterprise_message_service_appliance_firmware): 1 vulnerability, 2 versions - [Foresight Archive and Retrieval System](https://www.precursorintelligence.com/product/tibco/foresight_archive_and_retrieval_system): 1 vulnerability, 2 versions - [Foresight Operational Monitor](https://www.precursorintelligence.com/product/tibco/foresight_operational_monitor): 1 vulnerability, 2 versions - [Foresight Transaction Insight](https://www.precursorintelligence.com/product/tibco/foresight_transaction_insight): 1 vulnerability, 2 versions - [Formvine](https://www.precursorintelligence.com/product/tibco/formvine): 1 vulnerability, 6 versions - [Hawk Distribution for Tibco Silver Fabric](https://www.precursorintelligence.com/product/tibco/hawk_distribution_for_tibco_silver_fabric): 1 vulnerability, 2 versions - [Iprocess Workspace Browser](https://www.precursorintelligence.com/product/tibco/iprocess_workspace_browser): 1 vulnerability, 5 versions - [Jasperreports Professional](https://www.precursorintelligence.com/product/tibco/jasperreports_professional): 1 vulnerability, 2 versions - [Loglogic Enterprise Virtual Appliance](https://www.precursorintelligence.com/product/tibco/loglogic_enterprise_virtual_appliance): 1 vulnerability, 1 version - [Loglogic Log Management Intelligence](https://www.precursorintelligence.com/product/tibco/loglogic_log_management_intelligence): 1 vulnerability, 1 version - [Loglogic Lx1025 Firmware](https://www.precursorintelligence.com/product/tibco/loglogic_lx1025_firmware): 1 vulnerability, 1 version - [Loglogic Lx1025r1 Firmware](https://www.precursorintelligence.com/product/tibco/loglogic_lx1025r1_firmware): 1 vulnerability, 1 version - [Loglogic Lx1025r2 Firmware](https://www.precursorintelligence.com/product/tibco/loglogic_lx1025r2_firmware): 1 vulnerability, 1 version - [Loglogic Lx1035 Firmware](https://www.precursorintelligence.com/product/tibco/loglogic_lx1035_firmware): 1 vulnerability, 1 version - [Loglogic Lx4025 Firmware](https://www.precursorintelligence.com/product/tibco/loglogic_lx4025_firmware): 1 vulnerability, 1 version - [Loglogic Lx4025r1 Firmware](https://www.precursorintelligence.com/product/tibco/loglogic_lx4025r1_firmware): 1 vulnerability, 1 version - [Loglogic Lx4025r2 Firmware](https://www.precursorintelligence.com/product/tibco/loglogic_lx4025r2_firmware): 1 vulnerability, 1 version - [Loglogic Lx4035 Firmware](https://www.precursorintelligence.com/product/tibco/loglogic_lx4035_firmware): 1 vulnerability, 1 version - [Loglogic Lx825 Firmware](https://www.precursorintelligence.com/product/tibco/loglogic_lx825_firmware): 1 vulnerability, 1 version - [Loglogic Mx3025 Firmware](https://www.precursorintelligence.com/product/tibco/loglogic_mx3025_firmware): 1 vulnerability, 1 version - [Loglogic Mx4025 Firmware](https://www.precursorintelligence.com/product/tibco/loglogic_mx4025_firmware): 1 vulnerability, 1 version - [Loglogic St1025 Firmware](https://www.precursorintelligence.com/product/tibco/loglogic_st1025_firmware): 1 vulnerability, 1 version - [Loglogic St2025-SAN Firmware](https://www.precursorintelligence.com/product/tibco/loglogic_st2025-san_firmware): 1 vulnerability, 1 version - [Loglogic St2025-Sanr1 Firmware](https://www.precursorintelligence.com/product/tibco/loglogic_st2025-sanr1_firmware): 1 vulnerability, 1 version - [Loglogic St2025-Sanr2 Firmware](https://www.precursorintelligence.com/product/tibco/loglogic_st2025-sanr2_firmware): 1 vulnerability, 1 version - [Loglogic St2035-SAN Firmware](https://www.precursorintelligence.com/product/tibco/loglogic_st2035-san_firmware): 1 vulnerability, 1 version - [Loglogic St4025 Firmware](https://www.precursorintelligence.com/product/tibco/loglogic_st4025_firmware): 1 vulnerability, 1 version - [Loglogic St4025r1 Firmware](https://www.precursorintelligence.com/product/tibco/loglogic_st4025r1_firmware): 1 vulnerability, 1 version - [Loglogic St4025r2 Firmware](https://www.precursorintelligence.com/product/tibco/loglogic_st4025r2_firmware): 1 vulnerability, 1 version - [Web Player](https://www.precursorintelligence.com/product/tibco/web_player): 1 vulnerability, 6 versions - [Businessworks Processmonitor](https://www.precursorintelligence.com/product/tibco/businessworks_processmonitor): 0 vulnerabilities, 1 version - [Activematrix Business Process Mangement](https://www.precursorintelligence.com/product/tibco/activematrix_business_process_mangement): 0 vulnerabilities, 1 version ## Questions ### How many vulnerabilities does Tibco have? Our catalogue lists 225 published vulnerabilities across 181 products and 1,343 versions from Tibco. The most recent Tibco flaw added to the known-exploited list is CVE-2018-5430, on 29 December 2022. ### Which Tibco vulnerabilities are being exploited? 2 Tibco vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2018-5430 and CVE-2018-18809. The full list is on this page. ### Which Tibco product has the most vulnerabilities? Spotfire Server, with 28 published vulnerabilities. Its own page lists the ones known to be exploited. ### How do I get alerts for new Tibco vulnerabilities? Create a Precursor Intelligence account and track the Tibco products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook. ## Running Tibco? Precursor Intelligence keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.precursorintelligence.com/register Book a demo: https://www.precursorintelligence.com/contact