CVE-2018-18807 TIBCO Statistica Server Vulnerable to Cross Site Scripting
MediumCVSS 5.4
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The web application of the TIBCO Statistica component of TIBCO Software Inc.'s TIBCO Statistica Server contains vulnerabilities which may allow an authenticated user to perform cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Statistica Server versions up to and including 13.4.0.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tibco statistica server | <= 13.4.0 | No fix listed |
| TIBCO Software Inc. TIBCO Statistica Server | <= 13.4.0 | No fix listed |
References
- 106021 third-party-advisory vdb-entry
- www.tibco.com vendor-advisory
- www.tibco.com vendor-advisory