CVE-2018-5436medium

CVE-2018-5436: medium-severity vulnerability in TIBCO Spotfire Server

TIBCO Spotfire Server information disclosure vulnerabilities

Published · Updated

Follow this CVE+ Monitor TIBCO Spotfire Analytics Platform for AWS Marketplace+ Monitor TIBCO Spotfire Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 1.0%
The Spotfire server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contain multiple vulnerabilities that may allow for the disclosure of information, including user and data source credentials. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 7.12.0, TIBCO Spotfire Server: versions up to and including 7.8.1; 7.9.0; 7.10.0; 7.11.0; 7.12.0.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
TIBCO Software Inc. · TIBCO Spotfire Analytics Platform for AWS MarketplaceTIBCO Software Inc. · TIBCO Spotfire Server
Related CVEs — TIBCO Spotfire Server

In the same product, most dangerous first.

CVE-2019-11211CRITICALTIBCO Enterprise Runtime for R Server Running On Linux With Containerized TERR Service Vulnerable To Remote Code ExecutionEPSS 3.7%CVE-2019-11210CRITICALTIBCO Enterprise Runtime for R Server Exposes Remote Code ExecutionEPSS 3.7%CVE-2018-5435CRITICALTIBCO Spotfire Product Family Remote Code Execution VulnerabilityEPSS 3.2%CVE-2018-18814HIGHTIBCO Spotfire Authentication VulnerabilityEPSS 3.1%CVE-2019-11206MEDIUMTIBCO Spotfire Server Vulnerabilities With Integrity of Comments and BookmarksEPSS 1.6%CVE-2018-18813HIGHTIBCO Spotfire Reflected and Persistent Cross-Site Scripting VulnerabilitiesEPSS 1.5%