CVE-2018-12410 — TIBCO Spotfire Statistics Services remote execution vulnerabilities
The web server component of TIBCO Software Inc's Spotfire Statistics Services contains multiple vulnerabilities that may allow the remote execution of code. Without needing to a…
Published: 2018-10-10 · CVSS: 9.8 · CVSS 3.0
The web server component of TIBCO Software Inc's Spotfire Statistics Services contains multiple vulnerabilities that may allow the remote execution of code. Without needing to authenticate, an attacker may be able to remotely execute code with the permissions of the system account used to run the web server component. Affected releases are TIBCO Software Inc. TIBCO Spotfire Statistics Services versions up to and including 7.11.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7