Critical severity10.0NVD Advisory· Published Sep 18, 2019· Updated Jun 17, 2026

CVE-2019-11210

Description

The server component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, and TIBCO Spotfire Analytics Platform for AWS Marketplace contains a vulnerability that theoretically allows an unauthenticated user to bypass access controls and remotely execute code using the operating system account hosting the affected component. This issue affects: TIBCO Enterprise Runtime for R - Server Edition versions 1.2.0 and below, and TIBCO Spotfire Analytics Platform for AWS Marketplace versions 10.4.0 and 10.5.0.

Affected products

TIBCO Software/TIBCO Enterprise Runtime for R - Server Editionllm-fuzzy2 versions
<=1.2.0+ 1 more
- (no CPE)range: <=1.2.0
- (no CPE)range: 1.2.0 and below
TIBCO Software/TIBCO Spotfire Analytics Platform for AWS Marketplacellm-fuzzy
Range: 10.4.0, 10.5.0
TIBCO Software/Spotfire Analytics Platform For AWScpe-rescue
Range: 10.4.0

Patches

Vulnerability mechanics

References

www.tibco.com/services/support/advisoriesnvdVendor Advisory
www.tibco.com/support/advisories/2019/09/tibco-security-advisory-september-17-2019-tibco-enterprise-runtime-for-r-server-2019-11210nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.650
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000