PT-2019-19290 · Tibco · Tibco Data Science For Aws+1

Published 2019-03-26 · Updated 2022-10-14 · CVE-2019-8987

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions TIBCO Data Science for AWS versions up to and including 6.4.0 TIBCO Spotfire Data Science versions up to and including 6.4.0

Description The application server component contains a persistent cross-site scripting issue that theoretically allows an authenticated user to gain access to all the capabilities of the web interface available to more privileged users.

Recommendations For TIBCO Data Science for AWS versions up to and including 6.4.0, update to a version later than 6.4.0 to resolve the issue. For TIBCO Spotfire Data Science versions up to and including 6.4.0, update to a version later than 6.4.0 to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-8987

Affected Products

Tibco Data Science For Aws

Tibco Spotfire Data Science

References · 5

• https://tibco.com/support/advisories/2019/03/tibco-security-advisory-march-26-2019-tibco-spotfire-data-science-2019-8987 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-8987 · Security Note
• http://tibco.com/services/support/advisories · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-8987 · Vendor Advisory
• http://securityfocus.com/bid/107595 · Note