CVE-2018-12410

🗓️ 10 Oct 2018 20:00:00Reported by tibcoType

The web server component of TIBCO Software Inc's Spotfire Statistics Services contains multiple vulnerabilities that may allow the remote execution of code. Without needing to authenticate, an attacker may be able to remotely execute code with the permissions of the system account used to run the web server component. Affected releases are TIBCO Software Inc. TIBCO Spotfire Statistics Services versions up to and including 7.11.0

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2018-12410 TIBCO Spotfire Statistics Services remote execution vulnerabilities	10 Oct 201820:00	–	cvelist
EUVD	EUVD-2018-4384	7 Oct 202500:30	–	euvd
NVD	CVE-2018-12410	10 Oct 201820:29	–	nvd
OSV	CVE-2018-12410	10 Oct 201820:29	–	osv
Prion	Design/Logic Flaw	10 Oct 201820:29	–	prion

NVD

Node

tibco spotfire_statistics_servicesRange≤7.11.0

[
  {
    "product": "TIBCO Spotfire Statistics Services",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "7.11.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/105558
tibco	www.tibco.com/support/advisories/2018/10/tibco-security-advisory-october-10-2018-tibco-spotfire-statistics

21 Nov 2024 03:45Current

9.9High risk

Vulners AI Score9.9

CVSS 27.5

CVSS 39.8

EPSS0.02121