Riskcovery

CVE-2020-9417

TIBCO Foresight SQL Injection

State
Published
Severity
7.6 High
Published
Oct 20, 2020
Updated
Sep 17, 2024
Reserved
Feb 26, 2020

Read the record on cve.org

Description

The Transaction Insight reporting component of TIBCO Software Inc.'s TIBCO Foresight Archive and Retrieval System, TIBCO Foresight Archive and Retrieval System Healthcare Edition, TIBCO Foresight Operational Monitor, TIBCO Foresight Operational Monitor Healthcare Edition, TIBCO Foresight Transaction Insight, and TIBCO Foresight Transaction Insight Healthcare Edition contains a vulnerability that theoretically allows an authenticated attacker to perform SQL injection. Affected releases are TIBCO Software Inc.'s TIBCO Foresight Archive and Retrieval System: versions 5.1.0 and below, version 5.2.0, TIBCO Foresight Archive and Retrieval System Healthcare Edition: versions 5.1.0 and below, version 5.2.0, TIBCO Foresight Operational Monitor: versions 5.1.0 and below, version 5.2.0, TIBCO Foresight Operational Monitor Healthcare Edition: versions 5.1.0 and below, version 5.2.0, TIBCO Foresight Transaction Insight: versions 5.1.0 and below, version 5.2.0, and TIBCO Foresight Transaction Insight Healthcare Edition: versions 5.1.0 and below, version 5.2.0.

Scores

CVSSScoreVectorSource
3.17.6 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:Ltibco

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
TIBCO Foresight Archive and Retrieval SystemTIBCO Software Inc.
  • 5.1.0 and earlierAffected
  • 5.2.0Affected
TIBCO Foresight Archive and Retrieval System Healthcare EditionTIBCO Software Inc.
  • 5.1.0 and earlierAffected
  • 5.2.0Affected
TIBCO Foresight Operational MonitorTIBCO Software Inc.
  • 5.1.0 and earlierAffected
  • 5.2.0Affected
TIBCO Foresight Operational Monitor Healthcare EditionTIBCO Software Inc.
  • 5.1.0 and earlierAffected
  • 5.2.0Affected
TIBCO Foresight Transaction InsightTIBCO Software Inc.
  • 5.1.0 and earlierAffected
  • 5.2.0Affected
TIBCO Foresight Transaction Insight Healthcare EditionTIBCO Software Inc.
  • 5.1.0 and earlierAffected
  • 5.2.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.