CVE-2018-12408

Published: Aug 8, 2018Modified: Nov 21, 2024

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The BusinessWorks engine component of TIBCO Software Inc.'s TIBCO ActiveMatrix BusinessWorks, TIBCO ActiveMatrix BusinessWorks for z/Linux, and TIBCO ActiveMatrix BusinessWorks Distribution for TIBCO Silver Fabric contains a vulnerability that may allow XML eXternal Entity (XXE) attacks via incoming network messages, and may disclose the contents of files accessible to a running BusinessWorks engine Affected releases are TIBCO Software Inc. TIBCO ActiveMatrix BusinessWorks: versions up to and including 5.13.0, TIBCO ActiveMatrix BusinessWorks for z/Linux: versions up to and including 5.13.0, TIBCO ActiveMatrix BusinessWorks Distribution for TIBCO Silver Fabric: versions up to and including 5.13.0.

Affected (3)

Products: Tibco: Activematrix Businessworks, Activematrix Businessworks Distribution For Tibco Silver Fabric

Tibco

2 products

Activematrix Businessworks

Activematrix Businessworks Distribution For Tibco Silver Fabric

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Tibco Activematrix Businessworks	Up to 5.13.0
Tibco Activematrix Businessworks	Up to 5.13.0
Tibco Activematrix Businessworks Distribution For Tibco Silver Fabric	Up to 5.13.0