CVE Feed

    Dashboard / CVE / CVE-2022-41564

    CVE-2022-41564

    The Hawk Console component of TIBCO Software Inc.'s TIBCO Hawk and TIBCO Operational Intelligence Hawk RedTail contains a vulnerability that will return the EMS transport password and EMS SSL password to a privileged user. Affected releases are TIBCO Software Inc.'s TIBCO Hawk: versions 6.1.0 through 6.2.1 and TIBCO Operational Intelligence Hawk RedTail: versions 7.0.0 through 7.2.0.

    Published:Feb 14, 2023
    Last Modified:Mar 20, 2025
    EPS:Feb 14, 2023
    EPSS Score:0.00108
    CVSS Score:6.8

    Affected Products

    Vendor
    Tibco
    Product
    Hawk
    Vendor
    Tibco
    Product
    Operational Intelligence Hawk Redtail

    Exploits

    No exploit reference

    Related CVEs

    CVE-2024-3182 (CVSS 6.5) — Install-type password disclosure vulnerability in Universal Installer including the Silent Installer in TIBCO …
    CVE-2023-26219 (CVSS 7.4) — The Hawk Console and Hawk Agent components of TIBCO Software Inc.'s TIBCO Hawk, TIBCO Hawk Distribution for TI…
    CVE-2008-3338 (CVSS 10) — Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as us…
    CVE-2008-1703 (CVSS 9.3) — Multiple buffer overflows in TIBCO Software Rendezvous before 8.1.0, as used in multiple TIBCO products, allow…
    CVE-2006-2830 (CVSS 7.5) — Buffer overflow in TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent (TRA) before 5.4, and Hawk before 4.6.1 …
    CVE-2006-2829 (CVSS 6.8) — Buffer overflow in Hawk Monitoring Agent (HMA) for TIBCO Hawk before 4.6.1 and TIBCO Runtime Agent (TRA) befor…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High