CVE-2018-5428

TIBCO Data Virtualization Command Injection Vulnerability

High · published June 20, 2018

CVSS v3.0
8.8
EPSS
3%
Percentile
87.2
In the wild
Unconfirmed
What it is

The version control adapters component of TIBCO Data Virtualization (formerly known as Cisco Information Server) contains vulnerabilities that may allow for arbitrary command execution. Affected releases are TIBCO Data Virtualization: 7.0.5; 7.0.6.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.03006 · 87.2th percentile
Published
2018-06-20T18:00Z
EPSS history
Timeline
  • 20 JUN 18:00Z
    TIBCO Data Virtualization Command Injection Vulnerability
    cvelistv5