CVE-2020-9412: TIBCO Managed File Transfer Platform Server for IBM i Arbitrary Command Execution

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-06-09 · updated 2026-06-17

Description

The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows execution of arbitrary commands at the privilege level of the affected system following a failed file transfer. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i: versions 7.1.0 and below, version 8.0.0.

Affected products

TIBCO Software Inc. TIBCO Managed File Transfer Platform Server for IBM i: through 7.1.0; 8.0.0

References

https://www.tibco.com/services/support/advisories
https://www.tibco.com/support/advisories/2020/06/tibco-security-advisory-june-9-2020-tibco-managed-file-transfer-2020-9412
https://www.tibco.com/services/support/advisories
https://www.tibco.com/support/advisories/2020/06/tibco-security-advisory-june-9-2020-tibco-managed-file-transfer-2020-9412

Get alerted when CVE-2020-9412 or the next vulnerability affects your stack