CVE-2017-5535

MEDIUM Year: 2017
CVSS v3 Score
6.8
Medium
CVSS v2 Score
4.3
Medium
Weakness Type
CWE-326
View all →

Vulnerability Description

The GridServer Broker, GridServer Driver, and GridServer Engine components of TIBCO Software Inc. TIBCO DataSynapse GridServer Manager contain vulnerabilities related to both the improper use of encryption mechanisms and the use of weak ciphers. A malicious actor could theoretically compromise the traffic between any of the components. Affected releases include TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager: versions up to and including 5.1.3; 6.0.0; 6.0.1; 6.0.2; 6.1.0; 6.1.1; and 6.2.0.

Related Vulnerabilities

CVE-2020-27208

MEDIUM
CVSS:6.8(Medium)

The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 & Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade t...

CWE-3262020

CVE-2023-36748

MEDIUM
CVSS:6.8(Medium)

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX15...

CWE-3262023

CVE-2024-22894

MEDIUM
CVSS:6.8(Medium)

An issue fixed in AIT-Deutschland Alpha Innotec Heatpumps V2.88.3 or later, V3.89.0 or later, V4.81.3 or later and Novelan Heatpumps V2.88.3 or later, V3.89.0 or later, V4.81.3 or later, allows remote...

CWE-3262024

CVE-2020-0533

MEDIUM
CVSS:6.7(Medium)

Reversible one-way hash in Intel(R) CSME versions before 11.8.76, 11.12.77 and 11.22.77 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disc...

CWE-3262020

CVE-2018-18767

HIGH
CVSS:7.0(High)

An issue was discovered in D-Link 'myDlink Baby App' version 2.04.06. Whenever actions are performed from the app (e.g., change camera settings or play lullabies), it communicates directly with the Wi...

CWE-3262018