Riskcovery

CVE-2018-12415

TIBCO Enterprise Message Service Vulnerable to CSRF Attacks

State
Published
Severity
7.5 High
Published
Nov 7, 2018
Updated
Sep 16, 2024
Reserved
Jun 14, 2018

Read the record on cve.org

Description

The Central Administration server (emsca) component of TIBCO Software Inc.'s TIBCO Enterprise Message Service, TIBCO Enterprise Message Service - Community Edition, and TIBCO Enterprise Message Service - Developer Edition contains a vulnerability which may allow an attacker to perform cross-site request forgery (CSRF) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Enterprise Message Service: versions 8.4.0 and below, TIBCO Enterprise Message Service - Community Edition: versions 8.4.0 and below, and TIBCO Enterprise Message Service - Developer Edition: versions 8.4.0 and below.

Scores

CVSSScoreVectorSource
3.07.5 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:Htibco

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
TIBCO Enterprise Message ServiceTIBCO Software Inc.
  • 8.4.0 and previousAffected
TIBCO Enterprise Message Service - Community EditionTIBCO Software Inc.
  • 8.4.0 and previousAffected
TIBCO Enterprise Message Service - Developer EditionTIBCO Software Inc.
  • 8.4.0 and previousAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.