CVE-2020-27146

The Core component of TIBCO Software Inc.'s TIBCO iProcess Workspace (Browser) contains a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a Cross Site Request Forgery (CSRF) attack on the affected system. A successful attack using this vulnerability requires human interaction from an authenticated user other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO iProcess Workspace (Browser): versions 11.6.0 and below.

• CWE-352

• http://www.tibco.com/services/support/advisoriesVendor Advisory
• https://www.tibco.com/support/advisories/2020/11/tibco-security-advisory-november-10-2020-tibco-iprocess-workspaceVendor Advisory
• http://www.tibco.com/services/support/advisoriesVendor Advisory
• https://www.tibco.com/support/advisories/2020/11/tibco-security-advisory-november-10-2020-tibco-iprocess-workspaceVendor Advisory

Published

Nov 10, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-27130A vulnerability in Cisco Security Manager could allow an una…9.1
• CVE-2020-27131Multiple vulnerabilities in the Java deserialization functio…9.8
• CVE-2020-27132Multiple vulnerabilities in Cisco Jabber for Windows, Jabber…9.9
• CVE-2020-27133Multiple vulnerabilities in Cisco Jabber for Windows, Jabber…9.9
• CVE-2020-27134Multiple vulnerabilities in Cisco Jabber for Windows, Jabber…9.9
• CVE-2020-2714Vulnerability in the Oracle Banking Payments product of Orac…4.3
• CVE-2020-27147The REST API component of TIBCO Software Inc.'s TIBCO Partne…6.5
• CVE-2020-27148The TIBCO EBX Add-on for Oracle Hyperion EPM, TIBCO EBX Data…7.1
• CVE-2020-27149By exploiting a vulnerability in NPort IA5150A/IA5250A Serie…6.5
• CVE-2020-2715Vulnerability in the Oracle Banking Corporate Lending produc…5.4
• CVE-2020-27150In multiple versions of NPort IA5000A Series, the result of …7.5
• CVE-2020-27151An issue was discovered in Kata Containers through 1.11.3 an…8.8