Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-35463 State: PUBLISHED Published: 2021-08-04T13:21:32 Last Updated: 2024-08-04T00:40:45.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Frontend Taglib module in Liferay Portal 7.4.0 allows remote attackers to inject arbitrary web script or HTML into the management toolbar search via the `keywords` parameter. Additional Analyst Notes: - CVE Program Container: References: - https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120850663
CVE ID: CVE-2021-35464 State: PUBLISHED Published: 2021-07-22T17:10:18.000Z Last Updated: 2025-10-21T23:25:39.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/* request to the server. The vulnerability exists due to the usage of Sun ONE Application Framework (JATO) found in versions of Java 8 or earlier Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugster.forgerock.org - h
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugster.forgerock.org - http://packetstormsecurity.com/files/163486/ForgeRock-OpenAM-Jato-Java-Deserialization.html - http://packetstormsecurity.com/files/163525/ForgeRock-Access-Manager-OpenAM-14.6.3-Remote-Code-Execution.html - https://backstage.forgerock.com/knowledge/kb/article/a47894244
CVE ID: CVE-2021-35465 State: PUBLISHED Published: 2021-08-23T12:44:08 Last Updated: 2024-08-04T00:40:45.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Arm products before 2021-08-23 do not properly consider the effect of exceptions on a VLLDM instruction. A Non-secure handler may have read or write access to part of a Secure context. This affects Arm Cortex-M33 r0p0 through r1p0, Arm Cortex-M35P r0, Arm Cortex-M55 r0p0 through r1p0, and Arm China STAR-MC1 (in the STAR SE configuration). Additional Analyst Notes: - CVE Program Container: References: - https://developer.arm.com/support/arm-security-updates - https://developer.arm.com/support/arm-security-updates/vlldm
- https://developer.arm.com/support/arm-security-updates - https://developer.arm.com/support/arm-security-updates/vlldm-instruction-security-vulnerability
CVE ID: CVE-2021-35469 State: PUBLISHED Published: 2021-07-14T11:43:07 Last Updated: 2024-08-04T00:40:46.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Lexmark Printer Software G2, G3 and G4 Installation Packages have a local escalation of privilege vulnerability due to a registry entry that has an unquoted service path. Additional Analyst Notes: - CVE Program Container: References: - http://support.lexmark.com/alerts/ - http://support.lexmark.com/index?id=TE952&page=content&locale=en&userlocale=EN_US
CVE ID: CVE-2021-35472 State: PUBLISHED Published: 2021-07-27T05:32:26 Last Updated: 2024-08-04T00:40:46.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spoofing. By running a loop that makes many authentication attempts, an attacker might alternately be authenticated as one of two different users. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/2539 - https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/tags - https://www.debian.org/security/2021/dsa-4943 - https://gitlab.ow2.org/lemonlda
2.org/lemonldap-ng/lemonldap-ng/-/tags - https://www.debian.org/security/2021/dsa-4943 - https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/commit/8d3b763b6af2b8a9c4ad2765fbfabffec8a73af5
CVE ID: CVE-2021-35473 State: PUBLISHED Published: 2024-11-10T00:00:00 Last Updated: 2024-11-19T19:34:45.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LemonLDAP::NG before 2.0.12. There is a missing expiration check in the OAuth2.0 handler, i.e., it does not verify access token validity. An attacker can use a expired access token from an OIDC client to access the OAuth2 handler The earliest affected version is 2.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/tags - https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/2549
CVE ID: CVE-2021-35474 State: PUBLISHED Published: 2021-06-30T07:15:22 Last Updated: 2024-08-04T00:40:46.453Z Vendors: Apache Software Foundation Products: Apache Traffic Server Problem Types: CWE-121 Description: Stack-based Buffer Overflow vulnerability in cachekey plugin of Apache Traffic Server. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/ra1a41ff92a70d25bf576d7da2590575e8ff430393a3f4a0c34de4277%40%3Cusers.trafficserver.apache.org%3E - https://www.debian.org/security/2021/dsa-4957
CVE ID: CVE-2021-35475 State: PUBLISHED Published: 2021-06-25T10:01:35 Last Updated: 2024-08-04T00:40:46.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAS Environment Manager 2.5 allows XSS through the Name field when creating/editing a server. The XSS will prompt when editing the Configuration Properties. Additional Analyst Notes: - CVE Program Container: References: - https://support.sas.com - https://github.com/saitamang/CVE-2021-35475/blob/main/README.md - http://packetstormsecurity.com/files/163294/SAS-Environment-Manager-2.5-Cross-Site-Scripting.html
CVE ID: CVE-2021-35477 State: PUBLISHED Published: 2021-08-02T03:57:24 Last Updated: 2024-08-04T00:40:46.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because a certain preempting store operation does not necessarily occur before a store operation that has an attacker-controlled value. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2021/08/01/3 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/patch/?id=f5e81d1117501546b7be050c5fb
/2021/08/01/3 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/patch/?id=f5e81d1117501546b7be050c5fbafa6efd2c722c - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/patch/?id=2039f26f3aca5b0e419b98f65dd36481337b86ee - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6JKK6XNRZX5BT5QVYOKGVJ2BHFZAP5EX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/565ZS55ZFEN62WVRRORT7R63RXW5F4T4/ - https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html
CVE ID: CVE-2021-35478 State: PUBLISHED Published: 2021-07-27T11:44:58 Last Updated: 2024-08-04T00:40:46.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios Log Server before 2.1.9 contains Reflected XSS in the dropdown box for the alert history and audit log function. All parameters used for filtering are affected. This affects users who open a crafted link or third-party web page. Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/downloads/nagios-log-server/change-log/ - https://research.nccgroup.com/?research=Technical%20advisories - https://research.nccgroup.com/2021/07/22/technical-advisory-stored-and-reflected-xss-vulnerability-i
ical%20advisories - https://research.nccgroup.com/2021/07/22/technical-advisory-stored-and-reflected-xss-vulnerability-in-nagios-log-server-cve-2021-35478cve-2021-35479/
CVE ID: CVE-2021-35479 State: PUBLISHED Published: 2021-07-27T11:47:41 Last Updated: 2024-08-04T00:40:46.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios Log Server before 2.1.9 contains Stored XSS in the custom column view for the alert history and audit log function through the affected pp parameter. This affects users who open a crafted link or third-party web page. Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/downloads/nagios-log-server/change-log/ - https://research.nccgroup.com/?research=Technical%20advisories - https://research.nccgroup.com/2021/07/22/technical-advisory-stored-and-reflected-xss-vulnerability-in-nagios-lo
sories - https://research.nccgroup.com/2021/07/22/technical-advisory-stored-and-reflected-xss-vulnerability-in-nagios-log-server-cve-2021-35478cve-2021-35479/
CVE ID: CVE-2021-35482 State: PUBLISHED Published: 2021-07-21T17:29:04 Last Updated: 2024-08-04T00:40:46.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Barco MirrorOp Windows Sender before 2.5.4.70. An attacker in the local network is able to achieve Remote Code Execution (with user privileges of the local user) on any device that tries to connect to a WePresent presentation system. Additional Analyst Notes: - CVE Program Container: References: - https://www.barco.com/en/support/software/R33050099?majorVersion=2&minorVersion=5&patchVersion=4&buildVersion=70
CVE ID: CVE-2021-35487 State: PUBLISHED Published: 2022-05-25T13:41:38 Last Updated: 2024-08-04T00:40:46.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nokia Broadcast Message Center through 11.1.0 allows an authenticated user to perform a Boolean Blind SQL Injection attack on the endpoint /owui/block/send-receive-updates (for the Manage Alerts page) via the extIdentifier HTTP POST parameter. This allows an attacker to obtain the database user, database name, and database version information, and potentially database data. Additional Analyst Notes: - CVE Program Container: References: - https://www.nokia.com/notices/responsible-disclosure/ - https://www.gruppotim.it/it/foote
ogram Container: References: - https://www.nokia.com/notices/responsible-disclosure/ - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2021-35488 State: PUBLISHED Published: 2021-11-09T22:29:41 Last Updated: 2024-08-04T00:40:46.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Thruk 2.40-2 allows /thruk/#cgi-bin/status.cgi?style=combined&title={TITLE] Reflected XSS via the host or title parameter. An attacker could inject arbitrary JavaScript into status.cgi. The payload would be triggered every time an authenticated user browses the page containing it. Additional Analyst Notes: - CVE Program Container: References: - https://www.gruppotim.it/redteam - https://www.thruk.org/changelog.html
CVE ID: CVE-2021-35489 State: PUBLISHED Published: 2021-11-09T22:28:52 Last Updated: 2024-08-04T00:40:47.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Thruk 2.40-2 allows /thruk/#cgi-bin/extinfo.cgi?type=2&host={HOSTNAME]&service={SERVICENAME]&backend={BACKEND] Reflected XSS via the host or service parameter. An attacker could inject arbitrary JavaScript into extinfo.cgi. The malicious payload would be triggered every time an authenticated user browses the page containing it. Additional Analyst Notes: - CVE Program Container: References: - https://www.gruppotim.it/redteam - https://www.thruk.org/changelog.html
CVE ID: CVE-2021-35490 State: PUBLISHED Published: 2021-12-15T19:49:49 Last Updated: 2024-08-04T00:40:47.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Thruk before 2.44 allows XSS for a quick command. Additional Analyst Notes: - CVE Program Container: References: - https://www.gruppotim.it/redteam - https://www.thruk.org/changelog.html
CVE ID: CVE-2021-35491 State: PUBLISHED Published: 2021-10-05T15:10:37 Last Updated: 2024-08-04T00:40:46.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) vulnerability in Wowza Streaming Engine through 4.8.11+5 allows a remote attacker to delete a user account via the /enginemanager/server/user/delete.htm userName parameter. The application does not implement a CSRF token for the GET request. This issue was resolved in Wowza Streaming Engine release 4.8.14. Additional Analyst Notes: - CVE Program Container: References: - https://www.gruppotim.it/redteam - https://www.wowza.com/docs/wowza-streaming-engine-4-8-14-release-notes - https://n4nj0.
tps://www.gruppotim.it/redteam - https://www.wowza.com/docs/wowza-streaming-engine-4-8-14-release-notes - https://n4nj0.github.io/advisories/wowza-streaming-engine-i/
CVE ID: CVE-2021-35492 State: PUBLISHED Published: 2021-10-05T15:12:22 Last Updated: 2024-08-04T00:40:46.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wowza Streaming Engine through 4.8.11+5 could allow an authenticated, remote attacker to exhaust filesystem resources via the /enginemanager/server/vhost/historical.jsdata vhost parameter. This is due to the insufficient management of available filesystem resources. An attacker could exploit this vulnerability through the Virtual Host Monitoring section by requesting random virtual-host historical data and exhausting available filesystem resources. A successful exploit could allow the attacker to cause database errors and cau
xhausting available filesystem resources. A successful exploit could allow the attacker to cause database errors and cause the device to become unresponsive to web-based management. (Manual intervention is required to free filesystem resources and return the application to an operational state.) Additional Analyst Notes: - CVE Program Container: References: - https://www.gruppotim.it/redteam - https://www.wowza.com/docs/wowza-streaming-engine-4-8-14-release-notes - https://n4nj0.github.io/advisories/wowza-streaming-engine-i/
CVE ID: CVE-2021-35493 State: PUBLISHED Published: 2021-09-14T17:20:10.187470Z Last Updated: 2024-09-17T03:14:29.776Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO WebFOCUS Client, TIBCO WebFOCUS Installer, TIBCO WebFOCUS Reporting Server Problem Types: In the worst case, if the victim is a privileged administrator, successful execution of these vulnerabilities can result in an attacker gaining full administrative access to the affected system or the victim's local system. Description: The WebFOCUS Reporting Server and WebFOCUS Client components of TIBCO Software Inc.'s TIBCO WebFOCUS Client, TIBCO WebFOCUS Installer, an
rting Server and WebFOCUS Client components of TIBCO Software Inc.'s TIBCO WebFOCUS Client, TIBCO WebFOCUS Installer, and TIBCO WebFOCUS Reporting Server contain easily exploitable Stored and Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker to social engineer a legitimate user with network access to execute scripts targeting the affected system or the victim's local system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO WebFOCUS Client: versions 8207.27.0 and below, TIBCO WebFOCUS Installer: versions 8207.27.0 and below, and TIBCO WebFOCUS
ebFOCUS Client: versions 8207.27.0 and below, TIBCO WebFOCUS Installer: versions 8207.27.0 and below, and TIBCO WebFOCUS Reporting Server: versions 8207.27.0 and below. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2021/09/tibco-security-advisory-september-14-2021-tibco-webfocus-2021-35493
CVE ID: CVE-2021-35494 State: PUBLISHED Published: 2021-10-12T17:35:11.042155Z Last Updated: 2024-09-17T00:51:58.556Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: TIBCO Software Inc. Products: TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Server for Microsoft Azure Problem Types: Successful execution of this vulnerability results in the attacker gaining unauthorized read access to the data of other users on the affected system. Description: The Rest API component
gaining unauthorized read access to the data of other users on the affected system. Description: The Rest API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix BPM, and TIBCO JasperReports Server for Microsoft Azure contain a race condition that allows a low privileged authenticated attacker via the REST API to obtain read access to temporary objects created by other users on the affected system. Affected releas
a the REST API to obtain read access to temporary objects created by other users on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions 7.2.1 and below, TIBCO JasperReports Server: versions 7.5.0 and 7.5.1, TIBCO JasperReports Server: version 7.8.0, TIBCO JasperReports Server: version 7.9.0, TIBCO JasperReports Server - Community Edition: versions 7.8.0 and below, TIBCO JasperReports Server - Developer Edition: versions 7.9.0 and below, TIBCO JasperReports Server for AWS Marketplace: versions 7.9.0 and below, TIBCO JasperReports Server for ActiveMatrix BPM: versions 7.9.0 and below, and TIBCO JasperReports Server for Microsoft Azure: version
orts Server for ActiveMatrix BPM: versions 7.9.0 and below, and TIBCO JasperReports Server for Microsoft Azure: version 7.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2021/10/tibco-security-advisory-october-12-2021-tibco-jasperreports-server-2021-35494
CVE ID: CVE-2021-35495 State: PUBLISHED Published: 2021-10-12T17:35:12.623465Z Last Updated: 2024-09-16T18:12:56.880Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Server for Microsoft Azure Problem Types: Successful execution of this vulnerability can result in an attacker gaining access to the victim’s FTP server at the privilege level of the victim. Description: The Scheduler Connection
r gaining access to the victim’s FTP server at the privilege level of the victim. Description: The Scheduler Connection component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix BPM, and TIBCO JasperReports Server for Microsoft Azure contains an easily exploitable vulnerability that allows an authenticated attacker with network access to obtain FTP server passwords for other users of the affected system. Affected releas
ated attacker with network access to obtain FTP server passwords for other users of the affected system. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions 7.2.1 and below, TIBCO JasperReports Server: versions 7.5.0 and 7.5.1, TIBCO JasperReports Server: version 7.8.0, TIBCO JasperReports Server: version 7.9.0, TIBCO JasperReports Server - Community Edition: versions 7.8.0 and below, TIBCO JasperReports Server - Developer Edition: versions 7.9.0 and below, TIBCO JasperReports Server for AWS Marketplace: versions 7.9.0 and below, TIBCO JasperReports Server for ActiveMatrix BPM: versions 7.9.0 and below, and TIBCO JasperReports Server for Microsoft Azure: version
orts Server for ActiveMatrix BPM: versions 7.9.0 and below, and TIBCO JasperReports Server for Microsoft Azure: version 7.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2021/10/tibco-security-advisory-october-12-2021-tibco-jasperreports-server-2021-35495
CVE ID: CVE-2021-35496 State: PUBLISHED Published: 2021-10-12T17:35:14.158822Z Last Updated: 2024-09-17T03:43:38.702Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Server for Microsoft Azure Problem Types: Successful execution of this vulnerability can result in unauthorized read, update, insert or delete access to the affected systems data and the ability to cause a denial of service (DOS) o
read, update, insert or delete access to the affected systems data and the ability to cause a denial of service (DOS) on the affected system. Description: The XMLA Connections component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix BPM, and TIBCO JasperReports Server for Microsoft Azure contains a difficult to exploit vulnerability that allows a low privileged attacker with network access to interfere with XML proces
ifficult to exploit vulnerability that allows a low privileged attacker with network access to interfere with XML processing in the affected component. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions 7.2.1 and below, TIBCO JasperReports Server: versions 7.5.0 and 7.5.1, TIBCO JasperReports Server: version 7.8.0, TIBCO JasperReports Server: version 7.9.0, TIBCO JasperReports Server - Community Edition: versions 7.8.0 and below, TIBCO JasperReports Server - Developer Edition: versions 7.9.0 and below, TIBCO JasperReports Server for AWS Marketplace: versions 7.9.0 and below, TIBCO JasperReports Server for ActiveMatrix BPM: versions 7.9.0 and below, and TIBCO Jas
lace: versions 7.9.0 and below, TIBCO JasperReports Server for ActiveMatrix BPM: versions 7.9.0 and below, and TIBCO JasperReports Server for Microsoft Azure: version 7.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories
CVE ID: CVE-2021-35497 State: PUBLISHED Published: 2021-10-05T17:25:10.057412Z Last Updated: 2024-09-16T23:51:00.951Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO ActiveSpaces - Community Edition, TIBCO ActiveSpaces - Developer Edition, TIBCO ActiveSpaces - Enterprise Edition, TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition, TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, TIBCO eFTL - Enterprise Edition Problem Types: The impact of this vulnerability includes the theoretical possibility that a malicious non-administrative user can gain full administrative access