Vulnerability Details CVE-2018-18813
The Spotfire web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains multiple vulnerabilities that may allow persistent and reflected cross-site scripting attacks. Affected releases are TIBCO Software Inc. TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 10.0.0, and TIBCO Spotfire Server: versions up to and including 7.10.1; 7.11.0; 7.11.1; 7.12.0; 7.13.0; 7.14.0; 10.0.0.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.9%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 4.3
References
- http://www.securityfocus.com/bid/106635
- http://www.tibco.com/services/support/advisories
- https://www.tibco.com/support/advisories/2019/01/tibco-security-advisory-january-16-2019-tibco-spotfire-2018-18813
- http://www.securityfocus.com/bid/106635
- http://www.tibco.com/services/support/advisories
- https://www.tibco.com/support/advisories/2019/01/tibco-security-advisory-january-16-2019-tibco-spotfire-2018-18813
Products affected by CVE-2018-18813
-
cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:-
-
cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:10.0.0
-
cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:6.5
-
cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:7.0.0
-
cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:7.0.2
-
cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:7.14.0
-
cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:7.14.1
-
cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:7.8.0
-
cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:7.8.1
-
cpe:2.3:a:tibco:spotfire_server:10.0.0
-
cpe:2.3:a:tibco:spotfire_server:4.5.1
-
cpe:2.3:a:tibco:spotfire_server:5.0.2
-
cpe:2.3:a:tibco:spotfire_server:5.5.1
-
cpe:2.3:a:tibco:spotfire_server:5.5.2
-
cpe:2.3:a:tibco:spotfire_server:5.5.3
-
cpe:2.3:a:tibco:spotfire_server:6.0.2
-
cpe:2.3:a:tibco:spotfire_server:6.0.3
-
cpe:2.3:a:tibco:spotfire_server:6.0.4
-
cpe:2.3:a:tibco:spotfire_server:6.5.0
-
cpe:2.3:a:tibco:spotfire_server:6.5.1
-
cpe:2.3:a:tibco:spotfire_server:6.5.2
-
cpe:2.3:a:tibco:spotfire_server:6.5.3
-
cpe:2.3:a:tibco:spotfire_server:7.0.0
-
cpe:2.3:a:tibco:spotfire_server:7.0.1
-
cpe:2.3:a:tibco:spotfire_server:7.0.2
-
cpe:2.3:a:tibco:spotfire_server:7.10.0
-
cpe:2.3:a:tibco:spotfire_server:7.10.1
-
cpe:2.3:a:tibco:spotfire_server:7.11.0
-
cpe:2.3:a:tibco:spotfire_server:7.11.1
-
cpe:2.3:a:tibco:spotfire_server:7.12.0
-
cpe:2.3:a:tibco:spotfire_server:7.13.0
-
cpe:2.3:a:tibco:spotfire_server:7.14.0
-
cpe:2.3:a:tibco:spotfire_server:7.5.0
-
cpe:2.3:a:tibco:spotfire_server:7.5.1
-
cpe:2.3:a:tibco:spotfire_server:7.6.0
-
cpe:2.3:a:tibco:spotfire_server:7.6.1
-
cpe:2.3:a:tibco:spotfire_server:7.7.0
-
cpe:2.3:a:tibco:spotfire_server:7.7.1
-
cpe:2.3:a:tibco:spotfire_server:7.8.0
-
cpe:2.3:a:tibco:spotfire_server:7.8.1
-
cpe:2.3:a:tibco:spotfire_server:7.8.2
-
cpe:2.3:a:tibco:spotfire_server:7.9.0
-
cpe:2.3:a:tibco:spotfire_server:7.9.1