CVE-2018-5434medium

CVE-2018-5434: falha de média gravidade em TIBCO Runtime Agent

XML eXternal Entity Expansion Vulnerabilities with TIBCO Runtime Agent

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar TIBCO Runtime Agent+ Monitorar TIBCO Runtime Agent for z/Linux

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.8epss 1.2%
The TIBCO Designer component of TIBCO Software Inc.'s TIBCO Runtime Agent, and TIBCO Runtime Agent for z/Linux contains vulnerabilities wherein a malicious user could perform XML external entity expansion (XXE) attacks to disclose host machine information. Affected releases are TIBCO Software Inc.'s TIBCO Runtime Agent: versions up to and including 5.10.0, and TIBCO Runtime Agent for z/Linux: versions up to and including 5.9.1.
CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N
Produtos afetados
TIBCO Software Inc. · TIBCO Runtime AgentTIBCO Software Inc. · TIBCO Runtime Agent for z/Linux
CVEs relacionadas — TIBCO Runtime Agent

No mesmo produto, das mais perigosas para as menos.

CVE-2021-28827CRITICALTIBCO Administrator Stored Cross Site Scripting vulnerabilityEPSS 1.1%CVE-2023-26219HIGHTIBCO Operational Intelligence Hawk RedTail Credential Exposure VulnerabilityEPSS 0.5%