CVE-2018-12410

CRITICAL 9.8CVE-2018-12410 · Published 10/10/2018 · updated 17/06/2026

In short

CVE-2018-12410 is a CRITICAL (CVSS 9.8) vulnerability affecting spotfire statistics services (tibco).
Chance of exploitation in the next 30 days (EPSS): 4.0%, higher than 90.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
spotfire statistics services tibco	`≤ 7.11.0`	No fix yet

Description

The web server component of TIBCO Software Inc's Spotfire Statistics Services contains multiple vulnerabilities that may allow the remote execution of code. Without needing to authenticate, an attacker may be able to remotely execute code with the permissions of the system account used to run the web server component. Affected releases are TIBCO Software Inc. TIBCO Spotfire Statistics Services versions up to and including 7.11.0.

References

securityfocus.com/bid/105558 · Third Party Advisory
tibco.com/support/advisories/2018/10/tibco-security-advisory-october-10-2018-tibco-spotfire-statistics · Third Party Advisory

More vulnerabilities in spotfire statistics services

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

spotfire statistics services

tibco

≤ 7.11.0

No fix yet

Description

More vulnerabilities in spotfire statistics services

See all →