{"schemaVersion":3,"id":"CVE-2018-12414","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"The Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezvous Cache (rvcache), and Rendezvous Daemon Manager (rvdm) components of TIBCO Software Inc.'s TIBCO Rendezvous, TIBCO Rendezvous Developer Edition, TIBCO Rendezvous for z/Linux, TIBCO Rendezvous for z/OS, TIBCO Rendezvous Network Server, TIBCO Substation ES contain vulnerabilities which may allow an attacker to perform cross-site request forgery (CSRF) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Rendezvous: versions up to and including 8.4.5, TIBCO Rendezvous Developer Edition: versions up to and including 8.4.5, TIBCO Rendezvous for z/Linux: versions up to and including 8.4.5, TIBCO Rendezvous for z/OS: versions up to and including 8.4.5, TIBCO Rendezvous Network Server: versions up to and including 1.1.2, and TIBCO Substation ES: versions up to and including 2.12.2.","dates":{"published":"2018-11-07T00:00:00.000Z","modified":"2024-09-16T21:04:22.688Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.8,"severity":"high","version":"3.0","versionLabel":"v3.0","source":"NVD","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":8.8,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":6.8,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00668,"percentile":0.5104,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00668},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00623,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00668,"percentile":0.5104}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00623,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00668,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00668,"percentile":0.5104}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-352","name":"Cross-Site Request Forgery (CSRF)","description":"The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.","type":"weakness","status":"Stable","abstraction":"Compound","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/352.html"}],"affected":[{"vendor":"tibco software inc.","product":"tibco rendezvous","name":"TIBCO Rendezvous","label":"tibco rendezvous","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ unspecified, ≤ 8.4.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ unspecified, ≤ 8.4.5","eol":null,"hubHref":"/vendor/tibco_software_inc/tibco_rendezvous"},{"vendor":"tibco software inc.","product":"tibco rendezvous developer edition","name":"TIBCO Rendezvous Developer Edition","label":"tibco rendezvous developer edition","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ unspecified, ≤ 8.4.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ unspecified, ≤ 8.4.5","eol":null,"hubHref":"/vendor/tibco_software_inc/tibco_rendezvous_developer_edition"},{"vendor":"tibco software inc.","product":"tibco rendezvous for z/linux","name":"TIBCO Rendezvous for z/Linux","label":"tibco rendezvous for z/linux","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ unspecified, ≤ 8.4.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ unspecified, ≤ 8.4.5","eol":null,"hubHref":"/vendor/tibco_software_inc/tibco_rendezvous_for_zlinux"},{"vendor":"tibco software inc.","product":"tibco rendezvous for z/os","name":"TIBCO Rendezvous for z/OS","label":"tibco rendezvous for z/os","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ unspecified, ≤ 8.4.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ unspecified, ≤ 8.4.5","eol":null,"hubHref":"/vendor/tibco_software_inc/tibco_rendezvous_for_zos"},{"vendor":"tibco software inc.","product":"tibco rendezvous network server","name":"TIBCO Rendezvous Network Server","label":"tibco rendezvous network server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ unspecified, ≤ 1.1.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ unspecified, ≤ 1.1.2","eol":null,"hubHref":"/vendor/tibco_software_inc/tibco_rendezvous_network_server"},{"vendor":"tibco software inc.","product":"tibco substation es","name":"TIBCO Substation ES","label":"tibco substation es","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ unspecified, ≤ 2.12.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ unspecified, ≤ 2.12.2","eol":null,"hubHref":"/vendor/tibco_software_inc/tibco_substation_es"},{"vendor":"tibco","product":"rendezvous","name":"rendezvous","label":"rendezvous","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 8.4.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 8.4.5","eol":null,"hubHref":"/vendor/tibco/rendezvous"},{"vendor":"tibco","product":"rendezvous_for_z\\/linux","name":"rendezvous for z\\/linux","label":"rendezvous_for_z\\/linux","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 8.4.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 8.4.5","eol":null,"hubHref":"/vendor/tibco/rendezvous_for_zlinux"},{"vendor":"tibco","product":"rendezvous_for_z\\/os","name":"rendezvous for z\\/os","label":"rendezvous_for_z\\/os","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 8.4.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 8.4.5","eol":null,"hubHref":"/vendor/tibco/rendezvous_for_zos"},{"vendor":"tibco","product":"rendezvous_network_server","name":"rendezvous network server","label":"rendezvous_network_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.1.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.1.2","eol":null,"hubHref":"/vendor/tibco/rendezvous_network_server"},{"vendor":"tibco","product":"substation_es","name":"substation es","label":"substation_es","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.12.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.12.0","eol":null,"hubHref":"/vendor/tibco/substation_es"}],"affectedCount":11,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.securityfocus.com/bid/105871","label":"www.securityfocus.com/bid/105871","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"http://www.tibco.com/services/support/advisories","label":"www.tibco.com/services/support/advisories","hostname":"www.tibco.com","tags":["X Refsource MISC","Vendor Advisory"]},{"url":"https://www.tibco.com/support/advisories/2018/11/tibco-security-advisory-november-6-2018-tibco-rendezvous","label":"www.tibco.com/support/advisories/2018/11/tibco-security-advisory-november-6-2018-tibco-rendezvous","hostname":"www.tibco.com","tags":["X Refsource CONFIRM","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2018-11-07T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-09-16T21:04:22.688Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":35,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T19:28:08.982Z","stale":false,"partial":false}}