What’s Vulnerable › Vulnerabilities

CVE-2022-22772: TIBCO Managed File Transfer Platform Server Remote Code Execution Vulnerability

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-03-30 · updated 2026-06-17

Description

The cfsend, cfrecv, and CyberResp components of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX and TIBCO Managed File Transfer Platform Server for z/Linux contain a difficult to exploit Remote Code Execution (RCE) vulnerability that allows a low privileged attacker with network access to execute arbitrary code on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX: versions 8.1.0 and below and TIBCO Managed File Transfer Platform Server for z/Linux: versions 8.1.0 and below.

Affected products

• TIBCO Software Inc. TIBCO Managed File Transfer Platform Server for IBM i: before 8.1.1 — fixed in 8.1.1

How to fix

Upgrade to a fixed version: TIBCO Software Inc. TIBCO Managed File Transfer Platform Server for IBM i 8.1.1. Check the vendor advisory for mitigations.

References

• https://www.tibco.com/services/support/advisories
• https://www.tibco.com/support/advisories/2022/03/tibco-security-advisory-march-30-2022-tibco-managed-file-transfer-2022-22772
• https://www.tibco.com/services/support/advisories
• https://www.tibco.com/support/advisories/2022/03/tibco-security-advisory-march-30-2022-tibco-managed-file-transfer-2022-22772

Get alerted when CVE-2022-22772 or the next vulnerability affects your stack