CVE-2018-5428 TIBCO Data Virtualization Command Injection Vulnerability
HighCVSS 8.8
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The version control adapters component of TIBCO Data Virtualization (formerly known as Cisco Information Server) contains vulnerabilities that may allow for arbitrary command execution. Affected releases are TIBCO Data Virtualization: 7.0.5; 7.0.6.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tibco data virtualization | = 7.0.5 | No fix listed |
| tibco data virtualization | = 7.0.6 | No fix listed |
| TIBCO Software Inc. TIBCO Data Virtualization | = 7.0.5 | No fix listed |
| TIBCO Software Inc. TIBCO Data Virtualization | = 7.0.6 | No fix listed |
References
- 104518 third-party-advisory vdb-entry
- www.tibco.com vendor-advisory