VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Jan 12, 2022· Updated Jun 17, 2026

CVE-2021-35500

CVE-2021-35500

Description

The Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization, TIBCO Data Virtualization, TIBCO Data Virtualization, and TIBCO Data Virtualization for AWS Marketplace contains a difficult to exploit vulnerability that allows a low privileged attacker with local access to download arbitrary files outside of the scope of the user's permissions on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Data Virtualization: versions 8.3.0 and below, TIBCO Data Virtualization: version 8.4.0, TIBCO Data Virtualization: version 8.5.0, and TIBCO Data Virtualization for AWS Marketplace: versions 8.5.0 and below.

Affected products

8
  • TIBCO Software/Data Virtualization5 versions
    cpe:2.3:a:tibco:data_virtualization:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:tibco:data_virtualization:*:*:*:*:*:*:*:*range: <=8.3.0
    • cpe:2.3:a:tibco:data_virtualization:8.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:data_virtualization:8.5.0:*:*:*:*:*:*:*
    • (no CPE)range: <=8.3.0, 8.4.0, <=8.5.0
    • (no CPE)range: 8.5.0
  • TIBCO Software/Data Virtualization For AWS Marketplace3 versions
    cpe:2.3:a:tibco:data_virtualization_for_aws_marketplace:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:tibco:data_virtualization_for_aws_marketplace:*:*:*:*:*:*:*:*range: <=8.5.0
    • (no CPE)range: <=8.5.0
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.