high8.8
CVE-2018-18813
The Spotfire web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains multiple v…
Impact
The Spotfire web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains multiple vulnerabilities that may allow persistent and reflected cross-site scripting attacks. Affected releases are TIBCO Software Inc. TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 10.0.0, and TIBCO Spotfire Server: versions up to and including 7.10.1; 7.11.0; 7.11.1; 7.12.0; 7.13.0; 7.14.0; 10.0.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tibco | Spotfire Analytics Platform For Aws | through 10.0.0 |
| Tibco | Spotfire Server | through 7.10.1 Versions 7.11.0, 7.11.1, 7.12.0, 7.13.0, 7.14.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/106635
- http://www.tibco.com/services/support/advisories
- https://www.tibco.com/support/advisories/2019/01/tibco-security-advisory-january-16-2019-tibco-spotfire-2018-18813
- http://www.securityfocus.com/bid/106635
- http://www.tibco.com/services/support/advisories
- https://www.tibco.com/support/advisories/2019/01/tibco-security-advisory-january-16-2019-tibco-spotfire-2018-18813