Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-5435


The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfire Desktop Language Packs contain multiple vulnerabilities that may allow for remote code execution. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analyst: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0; 7.12.0, TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 7.12.0, TIBCO Spotfire Deployment Kit: versions up to and including 7.8.0; 7.9.0;7.9.1;7.10.0;7.10.1;7.11.0; 7.12.0, TIBCO Spotfire Desktop: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0;7.12.0, TIBCO Spotfire Desktop Language Packs: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0.


Published

2018-06-27T16:29:00.347

Last Modified

2024-11-21T04:08:47.810

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 9.6 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application tibco spotfire_analyst ≤ 7.8.0 Yes
Application tibco spotfire_analyst 7.9.0 Yes
Application tibco spotfire_analyst 7.9.1 Yes
Application tibco spotfire_analyst 7.10.0 Yes
Application tibco spotfire_analyst 7.10.1 Yes
Application tibco spotfire_analyst 7.11.0 Yes
Application tibco spotfire_analyst 7.12.0 Yes
Application tibco spotfire_analytics_platform_for_aws ≤ 7.12.0 Yes
Application tibco spotfire_deployment_kit ≤ 7.8.0 Yes
Application tibco spotfire_deployment_kit 7.9.0 Yes
Application tibco spotfire_deployment_kit 7.9.1 Yes
Application tibco spotfire_deployment_kit 7.10.0 Yes
Application tibco spotfire_deployment_kit 7.10.1 Yes
Application tibco spotfire_deployment_kit 7.11.0 Yes
Application tibco spotfire_deployment_kit 7.12.0 Yes
Application tibco spotfire_desktop ≤ 7.8.0 Yes
Application tibco spotfire_desktop 7.9.0 Yes
Application tibco spotfire_desktop 7.9.1 Yes
Application tibco spotfire_desktop 7.10.0 Yes
Application tibco spotfire_desktop 7.10.1 Yes
Application tibco spotfire_desktop 7.11.0 Yes
Application tibco spotfire_desktop 7.12.0 Yes
Application tibco spotfire_desktop_language_packs ≤ 7.8.0 Yes
Application tibco spotfire_desktop_language_packs 7.9.0 Yes
Application tibco spotfire_desktop_language_packs 7.9.1 Yes
Application tibco spotfire_desktop_language_packs 7.10.0 Yes
Application tibco spotfire_desktop_language_packs 7.10.1 Yes
Application tibco spotfire_desktop_language_packs 7.11.0 Yes
Application tibco spotfire_analyst ≤ 7.8.0 Yes
Application tibco spotfire_analyst 7.9.0 Yes
Application tibco spotfire_analyst 7.9.1 Yes
Application tibco spotfire_analyst 7.10.0 Yes
Application tibco spotfire_analyst 7.10.1 Yes
Application tibco spotfire_analyst 7.11.0 Yes
Application tibco spotfire_analyst 7.12.0 Yes
Application tibco spotfire_analytics_platform_for_aws ≤ 7.12.0 Yes
Application tibco spotfire_deployment_kit ≤ 7.8.0 Yes
Application tibco spotfire_deployment_kit 7.9.0 Yes
Application tibco spotfire_deployment_kit 7.9.1 Yes
Application tibco spotfire_deployment_kit 7.10.0 Yes
Application tibco spotfire_deployment_kit 7.10.1 Yes
Application tibco spotfire_deployment_kit 7.11.0 Yes
Application tibco spotfire_deployment_kit 7.12.0 Yes
Application tibco spotfire_desktop ≤ 7.8.0 Yes
Application tibco spotfire_desktop 7.9.0 Yes
Application tibco spotfire_desktop 7.9.1 Yes
Application tibco spotfire_desktop 7.10.0 Yes
Application tibco spotfire_desktop 7.10.1 Yes
Application tibco spotfire_desktop 7.11.0 Yes
Application tibco spotfire_desktop 7.12.0 Yes

References