9.8

CVE-2018-12410: tibco software inc. tibco spotfire statistics services

CVSS: 9.8v3.0CriticalModified
Published 10-10-2018Last modified 16-09-2024
Open JSON

Vulnerability summary

CVE-2018-12410 is a critical (CVSS 9.8) vulnerability in tibco software inc. tibco spotfire statistics services. EPSS estimates a 3.97% chance of exploitation in the next 30 days, higher than 90.3% of scored vulnerabilities.

Overall risk
70/100
0100
High · default modelHow is this calculated?
CVSS score
9.8/10
010
Critical · v3.0 (CVE.org)
EPSS score
3.97%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 10-10-2018
    PublishedVulnerability first disclosed.
  2. 16-09-2024
    Last modifiedVulnerability information updated.

Description

The web server component of TIBCO Software Inc's Spotfire Statistics Services contains multiple vulnerabilities that may allow the remote execution of code. Without needing to authenticate, an attacker may be able to remotely execute code with the permissions of the system account used to run the web server component. Affected releases are TIBCO Software Inc. TIBCO Spotfire Statistics Services versions up to and including 7.11.0.

CVSS metrics

3 scores · 2 sources · 2 versions

EPSS trend

Probability

3.97%

Chance of exploitation in the next 30 days

Percentile

90%

Versus all other CVEs

30-day change

0.00 pp

From 3.97% on 19-09-2026

19-09-202619-10-2026
EPSS score
3.97%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Tibco1 product
Tibco software inc.1 product

2 vendors · 2 products

References

2 links