CVE-2018-12412

ÉLEVÉE 8.8CVE-2018-12412 · Published 06/11/2018 · updated 17/06/2026

En bref

CVE-2018-12412 est une vulnérabilité ÉLEVÉE (CVSS 8.8) touchant ftl (tibco).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.88%, plus élevée que 59.1% des vulnérabilités.
Correctif : mettre à jour vers 5.4.0 ou plus récent.

Package	Affected versions	Patched versions
ftl tibco	`≥ 1.0.0, < 5.4.0`	`5.4.0`

Description

The realm server (tibrealmserver) component of TIBCO Software Inc. TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a vulnerability which may allow an attacker to perform cross-site request forgery (CSRF) attacks. Affected releases are TIBCO Software Inc. TIBCO FTL - Community Edition: versions up to and including 5.4.0, TIBCO FTL - Developer Edition: versions up to and including 5.4.0, TIBCO FTL - Enterprise Edition: versions up to and including 5.4.0.

References

securityfocus.com/bid/105861 · Third Party Advisory
tibco.com/services/support/advisories · Vendor Advisory
tibco.com/support/advisories/2018/11/tibco-security-advisory-november-6-2018-tibco-ftl · Vendor Advisory

Autres vulnérabilités de ftl

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

ftl

tibco

≥ 1.0.0, < 5.4.0

5.4.0

Description

Autres vulnérabilités de ftl

Tout voir →