Is CVE-2017-5535 actively exploited?

No active exploitation of CVE-2017-5535 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2017-5535 be exploited remotely?

Partially. CVE-2017-5535 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2017-5535?

CVE-2017-5535 has a CVSS score of 6.8 (MEDIUM).

HOME VULNERABILITIESCVE-2017-5535

MEDIUM

CVE-2017-5535

CWE-326Published: May 1, 2018· Updated: Jun 17, 2026

6.8

CVSS v3.1

Official Description

The GridServer Broker, GridServer Driver, and GridServer Engine components of TIBCO Software Inc. TIBCO DataSynapse GridServer Manager contain vulnerabilities related to both the improper use of encryption mechanisms and the use of weak ciphers. A malicious actor could theoretically compromise the traffic between any of the components. Affected releases include TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager: versions up to and including 5.1.3; 6.0.0; 6.0.1; 6.0.2; 6.1.0; 6.1.1; and 6.2.0.

NVD Source

Technical Analysis

CVE-2017-5535 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), with a CVSS base score of 6.8.