CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-12415

The Central Administration server (emsca) component of TIBCO Software Inc.'s TIBCO Enterprise Message Service, TIBCO Enterprise Message Service - Community Edition, and TIBCO Enterprise Message Service - Developer Edition contains a vulnerability which may allow an attacker to perform cross-site request forgery (CSRF) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Enterprise Message Service: versions 8.4.0 and below, TIBCO Enterprise Message Service - Community Edition: versions 8.4.0 and below, and TIBCO Enterprise Message Service - Developer Edition: versions 8.4.0 and below.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 39.0%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 6.8

References

Products affected by CVE-2018-12415

Tibco » Enterprise Message Service » Version: N/A

cpe:2.3:a:tibco:enterprise_message_service:-
Tibco » Enterprise Message Service » Version: 5.1.0

cpe:2.3:a:tibco:enterprise_message_service:5.1.0
Tibco » Enterprise Message Service » Version: 5.1.1

cpe:2.3:a:tibco:enterprise_message_service:5.1.1
Tibco » Enterprise Message Service » Version: 5.1.2

cpe:2.3:a:tibco:enterprise_message_service:5.1.2
Tibco » Enterprise Message Service » Version: 5.1.3

cpe:2.3:a:tibco:enterprise_message_service:5.1.3
Tibco » Enterprise Message Service » Version: 5.1.4

cpe:2.3:a:tibco:enterprise_message_service:5.1.4
Tibco » Enterprise Message Service » Version: 5.1.5

cpe:2.3:a:tibco:enterprise_message_service:5.1.5
Tibco » Enterprise Message Service » Version: 6.0.0

cpe:2.3:a:tibco:enterprise_message_service:6.0.0
Tibco » Enterprise Message Service » Version: 6.0.1

cpe:2.3:a:tibco:enterprise_message_service:6.0.1
Tibco » Enterprise Message Service » Version: 6.1.0

cpe:2.3:a:tibco:enterprise_message_service:6.1.0
Tibco » Enterprise Message Service » Version: 6.2.0

cpe:2.3:a:tibco:enterprise_message_service:6.2.0
Tibco » Enterprise Message Service » Version: 6.3.0

cpe:2.3:a:tibco:enterprise_message_service:6.3.0
Tibco » Enterprise Message Service » Version: 7.0.0

cpe:2.3:a:tibco:enterprise_message_service:7.0.0
Tibco » Enterprise Message Service » Version: 7.0.1

cpe:2.3:a:tibco:enterprise_message_service:7.0.1
Tibco » Enterprise Message Service » Version: 8.0.0

cpe:2.3:a:tibco:enterprise_message_service:8.0.0
Tibco » Enterprise Message Service » Version: 8.1.0

cpe:2.3:a:tibco:enterprise_message_service:8.1.0
Tibco » Enterprise Message Service » Version: 8.2.0

cpe:2.3:a:tibco:enterprise_message_service:8.2.0
Tibco » Enterprise Message Service » Version: 8.2.1

cpe:2.3:a:tibco:enterprise_message_service:8.2.1
Tibco » Enterprise Message Service » Version: 8.2.2

cpe:2.3:a:tibco:enterprise_message_service:8.2.2
Tibco » Enterprise Message Service » Version: 8.3.0

cpe:2.3:a:tibco:enterprise_message_service:8.3.0
Tibco » Enterprise Message Service » Version: 8.4.0

cpe:2.3:a:tibco:enterprise_message_service:8.4.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-12415

Products

Pricing

Contact Us