What’s Vulnerable › Vulnerabilities

CVE-2021-43049: TIBCO BusinessConnect Container Edition username and password leakage

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-02-15 · updated 2026-06-17

Description

The Database component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to obtain the usernames and passwords of users of the affected system. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition: versions 1.1.0 and below.

Affected products

• TIBCO Software Inc. TIBCO BusinessConnect: before 1.1.1 — fixed in 1.1.1

How to fix

Upgrade to a fixed version: TIBCO Software Inc. TIBCO BusinessConnect 1.1.1. Check the vendor advisory for mitigations.

References

• https://www.tibco.com/services/support/advisories
• https://www.tibco.com/support/advisories/2022/01/tibco-security-advisory-february-15-2022-tibco-bcce-2021-43049
• https://www.tibco.com/services/support/advisories
• https://www.tibco.com/support/advisories/2022/01/tibco-security-advisory-february-15-2022-tibco-bcce-2021-43049

Get alerted when CVE-2021-43049 or the next vulnerability affects your stack