Medium severity5.4NVD Advisory· Published Mar 26, 2019· Updated Jun 17, 2026
CVE-2019-8987
CVE-2019-8987
Description
The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a persistent cross-site scripting vulnerability that theoretically allows an authenticated user to gain access to all the capabilities of the web interface available to more privileged users. Affected releases are TIBCO Software Inc.'s TIBCO Data Science for AWS: versions up to and including 6.4.0, and TIBCO Spotfire Data Science: versions up to and including 6.4.0.
Affected products
5cpe:2.3:a:tibco:data_science_for_aws:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:tibco:data_science_for_aws:*:*:*:*:*:*:*:*range: <=6.4.0
- (no CPE)range: <=6.4.0
- (no CPE)range: unspecified
cpe:2.3:a:tibco:spotfire_data_science:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:tibco:spotfire_data_science:*:*:*:*:*:*:*:*range: <=6.4.0
- (no CPE)range: <=6.4.0
Patches
Vulnerability mechanics
References
3- www.securityfocus.com/bid/107595nvdBroken LinkThird Party AdvisoryVDB Entry
- www.tibco.com/services/support/advisoriesnvdVendor Advisory
- www.tibco.com/support/advisories/2019/03/tibco-security-advisory-march-26-2019-tibco-spotfire-data-science-2019-8987nvdVendor Advisory
News mentions
0No linked articles in our index yet.