high7.6
CVE-2018-18807
The web application of the TIBCO Statistica component of TIBCO Software Inc.'s TIBCO Statistica Server contains vulnerabilities which may allow an authenticate…
Impact
The web application of the TIBCO Statistica component of TIBCO Software Inc.'s TIBCO Statistica Server contains vulnerabilities which may allow an authenticated user to perform cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Statistica Server versions up to and including 13.4.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tibco | Statistica Server | through 13.4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/106021
- http://www.tibco.com/services/support/advisories
- https://www.tibco.com/support/advisories/2018/11/tibco-security-advisory-november-26-2018-tibco-statistica-server
- http://www.securityfocus.com/bid/106021
- http://www.tibco.com/services/support/advisories
- https://www.tibco.com/support/advisories/2018/11/tibco-security-advisory-november-26-2018-tibco-statistica-server