CVE Feed

    Dashboard / CVE / CVE-2018-5435

    CVE-2018-5435

    The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfire Desktop Language Packs contain multiple vulnerabilities that may allow for remote code execution. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analyst: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0; 7.12.0, TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 7.12.0, TIBCO Spotfire Deployment Kit: versions up to and including 7.8.0; 7.9.0;7.9.1;7.10.0;7.10.1;7.11.0; 7.12.0, TIBCO Spotfire Desktop: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0;7.12.0, TIBCO Spotfire Desktop Language Packs: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0.

    Published:Jun 27, 2018
    Last Modified:Nov 21, 2024
    EPS:Jun 27, 2018
    EPSS Score:0.01478
    CVSS Score:9.6

    Affected Products

    Vendor
    Tibco
    Product
    Spotfire Analyst
    Vendor
    Tibco
    Product
    Spotfire Analytics Platform For Aws
    Vendor
    Tibco
    Product
    Spotfire Deployment Kit
    Vendor
    Tibco
    Product
    Spotfire Desktop
    Vendor
    Tibco
    Product
    Spotfire Desktop Language Packs

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-3115 (CVSS 9.4) — Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system ex…
    CVE-2023-26221 (CVSS 5) — The Spotfire Connectors component of TIBCO Software Inc.'s Spotfire Analyst, Spotfire Server, and Spotfire for…
    CVE-2023-26220 (CVSS 5.4) — The Spotfire Library component of TIBCO Software Inc.'s Spotfire Analyst and Spotfire Server contains an easil…
    CVE-2022-41558 (CVSS 9) — The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Sp…
    CVE-2021-23273 (CVSS 8) — The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platfo…
    CVE-2020-9416 (CVSS 8.2) — The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platfo…
    CVE-2019-17334 (CVSS 8) — The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platfor…
    CVE-2017-3181 (CVSS 9.8) — Multiple TIBCO Products are prone to multiple unspecified SQL-injection vulnerabilities because it fails to pr…
    CVE-2017-3180 (CVSS 5.4) — Multiple TIBCO Products are prone to multiple unspecified cross-site scripting vulnerabilities because it fail…
    CVE-2018-5437 (CVSS 6.8) — The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotf…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High