Critical severity9.8NVD Advisory· Published Feb 15, 2022· Updated Jun 17, 2026

CVE-2021-43049

Description

The Database component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to obtain the usernames and passwords of users of the affected system. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition: versions 1.1.0 and below.

Affected products

TIBCO Software/BusinessConnect
cpe:2.3:a:tibco:businessconnect:*:*:*:*:container:*:*:*
Range: <1.1.1
TIBCO Software/TIBCO BusinessConnect Container Editionllm-fuzzy2 versions
<=1.1.0+ 1 more
- (no CPE)range: <=1.1.0
- (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

www.tibco.com/services/support/advisoriesnvdVendor Advisory
www.tibco.com/support/advisories/2022/01/tibco-security-advisory-february-15-2022-tibco-bcce-2021-43049nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000