Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-5437

The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfire Desktop Language Packs contain multiple vulnerabilities that may allow for unauthorized information disclosure. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analyst: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0; 7.12.0, TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 7.12.0, TIBCO Spotfire Deployment Kit: versions up to and including 7.8.0; 7.9.0;7.9.1;7.10.0;7.10.1;7.11.0; 7.12.0, TIBCO Spotfire Desktop: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0;7.12.0, TIBCO Spotfire Desktop Language Packs: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0.

Published

2018-06-27T16:29:00.443

Last Modified

2024-11-21T04:08:48.097

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 6.8 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

8.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application tibco spotfire_analyst ≤ 7.8.0 Yes
Application tibco spotfire_analyst 7.9.0 Yes
Application tibco spotfire_analyst 7.9.1 Yes
Application tibco spotfire_analyst 7.10.0 Yes
Application tibco spotfire_analyst 7.10.1 Yes
Application tibco spotfire_analyst 7.11.0 Yes
Application tibco spotfire_analyst 7.12.0 Yes
Application tibco spotfire_analytics_platform_for_aws ≤ 7.12.0 Yes
Application tibco spotfire_deployment_kit ≤ 7.8.0 Yes
Application tibco spotfire_deployment_kit 7.9.0 Yes
Application tibco spotfire_deployment_kit 7.9.1 Yes
Application tibco spotfire_deployment_kit 7.10.0 Yes
Application tibco spotfire_deployment_kit 7.10.1 Yes
Application tibco spotfire_deployment_kit 7.11.0 Yes
Application tibco spotfire_deployment_kit 7.12.0 Yes
Application tibco spotfire_desktop ≤ 7.8.0 Yes
Application tibco spotfire_desktop 7.9.0 Yes
Application tibco spotfire_desktop 7.9.1 Yes
Application tibco spotfire_desktop 7.10.0 Yes
Application tibco spotfire_desktop 7.10.1 Yes
Application tibco spotfire_desktop 7.11.0 Yes
Application tibco spotfire_desktop 7.12.0 Yes
Application tibco spotfire_desktop_language_packs ≤ 7.8.0 Yes
Application tibco spotfire_desktop_language_packs 7.9.0 Yes
Application tibco spotfire_desktop_language_packs 7.9.1 Yes
Application tibco spotfire_desktop_language_packs 7.10.0 Yes
Application tibco spotfire_desktop_language_packs 7.10.1 Yes
Application tibco spotfire_desktop_language_packs 7.11.0 Yes
References