VYPR
Medium severity6.5NVD Advisory· Published Dec 15, 2020· Updated Jun 17, 2026

CVE-2020-27147

CVE-2020-27147

Description

The REST API component of TIBCO Software Inc.'s TIBCO PartnerExpress contains a vulnerability that theoretically allows an unauthenticated attacker with network access to obtain an authenticated login URL for the affected system via a REST API. Affected releases are TIBCO Software Inc.'s TIBCO PartnerExpress: version 6.2.0.

Affected products

3
  • TIBCO Software/Partnerexpressllm-fuzzy3 versions
    = 6.2.0+ 2 more
    • (no CPE)range: = 6.2.0
    • (no CPE)range: 6.2.0
    • cpe:2.3:a:tibco:partnerexpress:6.2.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.