VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Jun 27, 2018· Updated Jun 17, 2026

CVE-2018-5436

CVE-2018-5436

Description

The Spotfire server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contain multiple vulnerabilities that may allow for the disclosure of information, including user and data source credentials. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 7.12.0, TIBCO Spotfire Server: versions up to and including 7.8.1; 7.9.0; 7.10.0; 7.11.0; 7.12.0.

Affected products

10
  • TIBCO Software/Spotfire Analytics Platform For AWS2 versions
    cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:*:*:*:*:*:*:*:*range: <=7.12.0
    • (no CPE)range: unspecified
  • TIBCO Software/Spotfire Server7 versions
    cpe:2.3:a:tibco:spotfire_server:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:tibco:spotfire_server:*:*:*:*:*:*:*:*range: <=7.8.1
    • cpe:2.3:a:tibco:spotfire_server:7.10.0:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_server:7.11.0:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_server:7.12.0:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_server:7.9.0:*:*:*:*:*:*:*
    • (no CPE)range: <=7.12.0
    • (no CPE)range: unspecified
  • TIBCO Software/TIBCO Spotfire Analytics Platform for AWS Marketplacellm-fuzzy
    Range: <=7.12.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.