Tibco Rendezvous — known CVE vulnerabilities

Every CVE whose affected-product data names Tibco Rendezvous, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (16)

• CVE-2008-1703 — CVSS 9.3 (critical): Multiple buffer overflows in TIBCO Software Rendezvous before 8.1.0, as used in multiple TIBCO products, allow remote attackers to execute…
• CVE-2021-28818 — CVSS 8.8 (high): The Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezvous Cache…
• CVE-2021-28817 — CVSS 8.8 (high): The Windows Installation component of TIBCO Software Inc.'s TIBCO Rendezvous and TIBCO Rendezvous Developer Edition contains a…
• CVE-2007-4162 — CVSS 7.8 (high): TIBCO Rendezvous (RV) 7.5.2 does not protect confidentiality or integrity of inter-daemon communication, which allows remote attackers to…
• CVE-2007-4158 — CVSS 7.8 (high): Memory leak in TIBCO Rendezvous (RV) daemon (rvd) 7.5.2, 7.5.3 and 7.5.4 allows remote attackers to cause a denial of service (memory…
• CVE-2006-2830 — CVSS 7.5 (high): Buffer overflow in TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent (TRA) before 5.4, and Hawk before 4.6.1 allows remote attackers to…
• CVE-2014-2543 — CVSS 7.5 (high): Buffer overflow in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure…
• CVE-2015-4555 — CVSS 7.5 (high): Buffer overflow in the HTTP administrative interface in TIBCO Rendezvous before 8.4.4, Rendezvous Network Server before 1.1.1, Substation…
• CVE-2018-12414 — CVSS 7.5 (high): The Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezvous Cache…
• CVE-2011-0649 — CVSS 7.2 (high): Multiple unspecified vulnerabilities in TIBCO Rendezvous 8.2.1 through 8.3.0, Enterprise Message Service (EMS) 5.1.0 through 6.0.0, Runtime…
• CVE-2007-4159 — CVSS 5.0 (medium): index.html in the HTTP administration interface in certain daemons in TIBCO Rendezvous (RV) 7.5.2 allows remote attackers to obtain…
• CVE-2014-2541 — CVSS 5.0 (medium): The Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon…
• CVE-2007-4160 — CVSS 5.0 (medium): The default configuration of TIBCO Rendezvous (RV) 7.5.2 clients, when -no-multicast is omitted, uses a multicast group as the destination…
• CVE-2007-4161 — CVSS 4.3 (medium): rvd in TIBCO Rendezvous (RV) 7.5.2, when -no-lead-wc is omitted, might allow remote attackers to cause a denial of service (network…
• CVE-2014-2542 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd)…
• CVE-2006-4676 — CVSS 1.2 (low): TIBCO RendezVous 7.4.11 and earlier logs base64-encoded usernames and passwords in rvrd.db, which allows local users to obtain sensitive…