CVE-2020-27146

ÉLEVÉE 8.8CVE-2020-27146 · Published 10/11/2020 · updated 17/06/2026

En bref

CVE-2020-27146 est une vulnérabilité ÉLEVÉE (CVSS 8.8) touchant iprocess workspace browser (tibco).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.33%, plus élevée que 26.2% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
iprocess workspace browser tibco	`≤ 11.6.0`	No fix yet

Description

The Core component of TIBCO Software Inc.'s TIBCO iProcess Workspace (Browser) contains a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a Cross Site Request Forgery (CSRF) attack on the affected system. A successful attack using this vulnerability requires human interaction from an authenticated user other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO iProcess Workspace (Browser): versions 11.6.0 and below.

References

tibco.com/services/support/advisories · Vendor Advisory
tibco.com/support/advisories/2020/11/tibco-security-advisory-november-10-2020-tibco-iprocess-workspace · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free