CVE-2018-18812: tibco software inc. tibco spotfire analytics platform for aws marketplace
Vulnerability summary
CVE-2018-18812 is a medium (CVSS 6.5) vulnerability in tibco software inc. tibco spotfire analytics platform for aws marketplace. EPSS estimates a 1.16% chance of exploitation in the next 30 days, higher than 66.5% of scored vulnerabilities.
Timeline
- 16-01-2019PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
The Spotfire Library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability that might theoretically fail to restrict users with read-only access from modifying files stored in the Spotfire Library, only when the Spotfire Library is configured to use external storage. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace versions up to and including 10.0.0, and TIBCO Spotfire Server versions up to and including 7.10.1; 7.11.0; 7.11.1; 7.12.0; 7.13.0; 7.14.0; 10.0.0.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST5.3MediumCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:NDiffers
EPSS trend
Probability
1.16%
Chance of exploitation in the next 30 days
Percentile
67%
Versus all other CVEs
30-day change
0.00 pp
From 1.16% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Tibco2 products
- spotfire_analytics_platform_for_aws≤ 10.0.0
- spotfire_server≤ 7.10.1 | 7.11.0 | 7.11.1 | 7.12.0 | 7.13.0 | 7.14.0 | 10.0.0
Tibco software inc.2 products
- tibco spotfire analytics platform for aws marketplace≥ unspecified, ≤ 10.0.0
- tibco spotfire server versions≥ unspecified, ≤ 7.10.1 | 7.11.0 | 7.11.1 | 7.12.0 | 7.13.0 | 7.14.0 | 10.0.0
2 vendors · 4 products