CVE Feed

    Dashboard / CVE / CVE-2017-5531

    CVE-2017-5531

    Deployments of TIBCO Managed File Transfer Command Center versions 8.0.0 and 8.0.1 and TIBCO Managed File Transfer Internet Server versions 8.0.0 and 8.0.1 that enable the Administrator Service may be affected by a vulnerability which may allow any authenticated user to gain administrative control of Managed File Transfer web applications.

    Published:Oct 17, 2017
    Last Modified:Apr 20, 2025
    EPS:Oct 17, 2017
    EPSS Score:0.00547
    CVSS Score:8

    Affected Products

    Vendor
    Tibco
    Product
    Managed File Transfer Command Center
    Vendor
    Tibco
    Product
    Managed File Transfer Internet Server

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2022-22774 (CVSS 8.6) — The DOM XML parser and SAX XML parser components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command …
    CVE-2020-9414 (CVSS 8.8) — The MFT admin service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center and TIBCO …
    CVE-2020-9413 (CVSS 6.3) — The MFT Browser file transfer client and MFT Browser admin client components of TIBCO Software Inc.'s TIBCO Ma…
    CVE-2018-18810 (CVSS 6.8) — The Administrator Service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, and T…
    CVE-2015-5711 (CVSS 4) — TIBCO Managed File Transfer Internet Server before 7.2.5, Managed File Transfer Command Center before 7.2.5, S…
    CVE-2014-7194 (CVSS 6.4) — TIBCO Managed File Transfer Internet Server before 7.2.4, Managed File Transfer Command Center before 7.2.4, S…
    CVE-2014-2545 (CVSS 5) — TIBCO Managed File Transfer Internet Server before 7.2.2, Managed File Transfer Command Center before 7.2.2, S…
    CVE-2011-3423 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer In…
    CVE-2011-3424 (CVSS 4.3) — Session fixation vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Ser…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High