CVE-2018-5435

Severity

99%

Complexity

99%

Confidentiality

165%

The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfire Desktop Language Packs contain multiple vulnerabilities that may allow for remote code execution. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analyst: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0; 7.12.0, TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 7.12.0, TIBCO Spotfire Deployment Kit: versions up to and including 7.8.0; 7.9.0;7.9.1;7.10.0;7.10.1;7.11.0; 7.12.0, TIBCO Spotfire Desktop: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0;7.12.0, TIBCO Spotfire Desktop Language Packs: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0.

The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfire Desktop Language Packs contain multiple vulnerabilities that may allow for remote code execution. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analyst: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0; 7.12.0, TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 7.12.0, TIBCO Spotfire Deployment Kit: versions up to and including 7.8.0; 7.9.0;7.9.1;7.10.0;7.10.1;7.11.0; 7.12.0, TIBCO Spotfire Desktop: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0;7.12.0, TIBCO Spotfire Desktop Language Packs: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0.

CVSS 3.0 Base Score 9.8. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVSS 2.0 Base Score 9.9. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C).

Overview

Type

TIBCO Spotfire

First reported 6 years ago

2018-06-27 16:29:00

Last updated 5 years ago

2019-10-09 23:41:00

Affected Software

TIBCO Spotfire Analyst 7.9.0

7.9.0

TIBCO Spotfire Analyst 7.9.1

7.9.1

TIBCO Spotfire Analyst 7.10.0

7.10.0

TIBCO Spotfire Analyst 7.10.1

7.10.1

TIBCO Spotfire Analyst 7.11.0

7.11.0

TIBCO Spotfire Analyst 7.12.0

7.12.0

TIBCO Spotfire Analytics Platform for AWS

TIBCO Spotfire Deployment Kit -

TIBCO Spotfire Deployment Kit 7.9.0

7.9.0

TIBCO Spotfire Deployment Kit 7.9.1

7.9.1

TIBCO Spotfire Deployment Kit 7.10.0

7.10.0

TIBCO Spotfire Deployment Kit 7.10.1

7.10.1

TIBCO Spotfire Deployment Kit 7.11.0

7.11.0

TIBCO Spotfire Deployment Kit 7.12.0

7.12.0

TIBCO Spotfire Desktop

TIBCO Spotfire Desktop 7.9.0

7.9.0

TIBCO Spotfire Desktop 7.9.1

7.9.1

TIBCO Spotfire Desktop 7.10.0

7.10.0

TIBCO Spotfire Desktop 7.10.1

7.10.1

TIBCO Spotfire Desktop 7.11.0

7.11.0

TIBCO Spotfire Desktop 7.12.0

7.12.0

TIBCO Spotfire Desktop Language Packs

TIBCO Spotfire Desktop Language Packs 7.9.0

7.9.0

TIBCO Spotfire Desktop Language Packs 7.9.1

7.9.1

TIBCO Spotfire Desktop Language Packs 7.10.0

7.10.0

TIBCO Spotfire Desktop Language Packs 7.10.1

7.10.1

TIBCO Spotfire Desktop Language Packs 7.11.0

7.11.0

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.