tibco enterprise message service

Name: tibco enterprise message service
Brand: tibco

productUS

cpe:2.3:a:tibco:enterprise_message_service:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical11high0medium0low

updated 2026-10-28

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2009-1291US	high10.0	6.43% (94th)	—	no fix	2009-04-30	7 versions
CVE-2007-5658US	high10.0	6.40% (94th)	—	no fix	2008-01-16	6 versions
CVE-2007-5655US	high10.0	5.55% (93rd)	—	no fix	2008-01-16	—
CVE-2007-5657US	high10.0	5.55% (93rd)	—	no fix	2008-01-16	—
CVE-2007-5656US	high10.0	5.44% (93rd)	—	no fix	2008-01-16	6 versions
CVE-2008-1704US	high10.0	5.36% (93rd)	—	no fix	2008-04-11	7 versions
CVE-2016-3628US	high8.8	2.17% (82nd)	—	no fix	2016-04-20	≤ 8.2.2
CVE-2018-12415US	high8.8	0.87% (59th)	—	no fix	2018-11-06	≤ 8.4.0
CVE-2011-0649US	high7.2	0.38% (31st)	—	no fix	2011-02-04	3 versions
CVE-2021-28822US	high7.8	0.26% (17th)	—	no fix	2021-03-23	≤ 8.5.1
CVE-2021-28821US	high7.8OT elevated	0.22% (13th)	—	no fix	2021-03-23	≤ 8.5.1

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer4 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-250Execution with Unnecessary Privileges1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs
CWE-399CWE-3991 CVEs
CWE-427Uncontrolled Search Path Element1 CVEs
CWE-863Incorrect Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.