CVE-2018-18807

5.4 mediumEPSS 1.2%

Medium (5.4) in tibco statistica server. EPSS 1.2% chance of exploitation in the next 30 days.

The web application of the TIBCO Statistica component of TIBCO Software Inc.'s TIBCO Statistica Server contains vulnerabilities which may allow an authenticated user to perform cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Statistica Server versions up to and including 13.4.0.

Severity

CVSS 3.0

5.4 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2018-11-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tibco:statistica_server

References

http://www.securityfocus.com/bid/106021
http://www.tibco.com/services/support/advisories
https://www.tibco.com/support/advisories/2018/11/tibco-security-advisory-november-26-2018-tibco-statistica-server
http://www.securityfocus.com/bid/106021
http://www.tibco.com/services/support/advisories

Check your stack JSON