CVE-2021-43048

The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a clickjacking attack on the affected system. A successful attack using this vulnerability does not require human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO PartnerExpress: versions 6.2.1 and below.

• CWE-1021

• https://www.tibco.com/services/support/advisoriesVendor Advisory
• https://www.tibco.com/support/advisories/2021/11/tibco-security-advisory-november-16-2021-tibco-partnerexpress-2021-43048Vendor Advisory
• https://www.tibco.com/services/support/advisoriesVendor Advisory
• https://www.tibco.com/support/advisories/2021/11/tibco-security-advisory-november-16-2021-tibco-partnerexpress-2021-43048Vendor Advisory

Published

Nov 16, 2021

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43042An issue was discovered in Kaseya Unitrends Backup Appliance…9.8
• CVE-2021-43043An issue was discovered in Kaseya Unitrends Backup Appliance…6.5
• CVE-2021-43044An issue was discovered in Kaseya Unitrends Backup Appliance…9.8
• CVE-2021-43045A vulnerability in the .NET SDK of Apache Avro allows an att…7.5
• CVE-2021-43046The Interior Server and Gateway Server components of TIBCO S…8.8
• CVE-2021-43047The Interior Server and Gateway Server components of TIBCO S…9
• CVE-2021-43049The Database component of TIBCO Software Inc.'s TIBCO Busine…9.8
• CVE-2021-4305A vulnerability was found in Woorank robots-txt-guard. It ha…7.5
• CVE-2021-43050The Auth Server component of TIBCO Software Inc.'s TIBCO Bus…7.8
• CVE-2021-43051The Spotfire Server component of TIBCO Software Inc.'s TIBCO…6.8
• CVE-2021-43052The Realm Server component of TIBCO Software Inc.'s TIBCO FT…7.5
• CVE-2021-43053The Realm Server component of TIBCO Software Inc.'s TIBCO FT…7.5