CVE-2008-1704

CRITICAL 10.0CVE-2008-1704 · Published 11/04/2008 · updated 16/06/2026

In short

CVE-2008-1704 is a CRITICAL (CVSS 10.0) vulnerability affecting enterprise message service (tibco), iprocess engine (tibco).
Chance of exploitation in the next 30 days (EPSS): 5.4%, higher than 92.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
enterprise message service tibco	`= 4.0.0= 4.1.0= 4.2.0= 4.3.0= 4.4.0= 4.4.1≤ 4.4.2`	No fix yet
iprocess engine tibco	`= 10.6.0= 10.6.1`	No fix yet

Description

Multiple buffer overflows in TIBCO Software Enterprise Message Service (EMS) before 4.4.3, and iProcess Engine 10.6.0 through 10.6.1, allow remote attackers to execute arbitrary code via a crafted message to the EMS server.

References

More vulnerabilities in enterprise message service

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

enterprise message service

tibco

= 4.0.0= 4.1.0= 4.2.0= 4.3.0= 4.4.0= 4.4.1≤ 4.4.2

No fix yet

iprocess engine

tibco

= 10.6.0= 10.6.1

No fix yet

More vulnerabilities in enterprise message service

See all →