[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fx-dLLohRtCZPY7UOYXiNaMlnUY-gNqN-Fo9nxitDOIQ":3,"g5a-risk:CVE-2018-12411":171},{"success":4,"data":5,"meta":169},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":15,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":71,"references":72,"referencesCount":87,"weaknesses":88,"weaknessesCount":97,"isActivelyExploited":98,"cisaInfo":15,"otxData":15,"relatedBlogPosts":99,"seoMetadata":100,"configurations":125,"relatedVendorCves":167,"notableEvents":168},"CVE-2018-12411","What is CVE-2018-12411?","The administrative daemon (tibdgadmind) of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, TIBCO ActiveSpaces - Developer Edition, and TIBCO ActiveSpaces - Enterprise Edition contains a vulnerability which may allow an attacker to perform cross-site request forgery (CSRF) attacks. Affected releases are TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition: 3.3.0; 3.4.0; 3.5.0, TIBCO ActiveSpaces - Developer Edition: 3.0.0; 3.1.0; 3.3.0; 3.4.0; 3.5.0, and TIBCO ActiveSpaces - Enterprise Edition: 3.0.0; 3.1.0; 3.2.0; 3.3.0; 3.4.0; 3.5.0.","The administrative daemon (tibdgadmind) of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, TIBCO ActiveSpaces - Developer Edition, and TIBCO Ac...","2018-11-06T23:29:00.23","2019-10-09T23:33:56.12",8.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":37,"CVSSMetricV40":15},null,[17,30],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":27,"IntegrityImpact":27,"AvailabilityImpact":27,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",2.8,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":36,"ImpactScore":29},"security@tibco.com","Secondary",{"Version":21,"VectorString":34,"AttackVector":22,"AttackComplexity":27,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":27,"IntegrityImpact":27,"AvailabilityImpact":27,"BaseScore":35,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",7.5,1.6,[38],{"Source":18,"Type":19,"CVSSData":39,"BaseSeverity":42,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":4},{"Version":40,"VectorString":41,"AccessVector":22,"AccessComplexity":42,"Authentication":24,"ConfidentialityImpact":43,"IntegrityImpact":43,"AvailabilityImpact":43,"BaseScore":44,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.00871,[47,47,47,47,47,47,47],"High",[51,56,59,62,65,68],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"tibco","activespaces","3.0.0","cpe:2.3:a:tibco:activespaces:3.0.0:*:*:*:developer:*:*:*",{"vendor":52,"product":53,"version":57,"criteria":58,"vulnerable":4},"3.1.0","cpe:2.3:a:tibco:activespaces:3.1.0:*:*:*:developer:*:*:*",{"vendor":52,"product":53,"version":60,"criteria":61,"vulnerable":4},"3.2.0","cpe:2.3:a:tibco:activespaces:3.2.0:*:*:*:enterprise:*:*:*",{"vendor":52,"product":53,"version":63,"criteria":64,"vulnerable":4},"3.3.0","cpe:2.3:a:tibco:activespaces:3.3.0:*:*:*:community:*:*:*",{"vendor":52,"product":53,"version":66,"criteria":67,"vulnerable":4},"3.4.0","cpe:2.3:a:tibco:activespaces:3.4.0:*:*:*:community:*:*:*",{"vendor":52,"product":53,"version":69,"criteria":70,"vulnerable":4},"3.5.0","cpe:2.3:a:tibco:activespaces:3.5.0:*:*:*:community:*:*:*",6,[73,79,84],{"url":74,"source":75,"tags":76},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F105869","Securityfocus",[77,78],"Third Party Advisory","VDB Entry",{"url":80,"source":81,"tags":82},"http:\u002F\u002Fwww.tibco.com\u002Fservices\u002Fsupport\u002Fadvisories","Tibco",[83],"Vendor Advisory",{"url":85,"source":81,"tags":86},"https:\u002F\u002Fwww.tibco.com\u002Fsupport\u002Fadvisories\u002F2018\u002F11\u002Ftibco-security-advisory-november-6-2018-tibco-activespaces",[83],3,[89],{"id":90,"name":91,"description":92,"extendedDescription":93,"status":94,"abstraction":95,"structure":96},"CWE-352","Cross-Site Request Forgery (CSRF)","The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.","When a web server is designed to receive a request from a client without any mechanism for verifying that it was intentionally sent, then it might be possible for an attacker to trick a client into making an unintentional request to the web server which will be treated as an authentic request. This can be done via a URL, image load, XMLHttpRequest, etc. and can result in exposure of data or unintended code execution.","Stable","Compound","Composite",1,false,[],{"title":101,"metaDescription":102,"keywords":103,"canonicalUrl":104,"structuredData":105},"What is CVE-2018-12411? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-12411, a high severity cyber security vulnerability from 2018. The administrative daemon (tibdgadmind) of TIBCO Software I...","CVE-2018-12411, CVE-2018-12411 vulnerability, CVE-2018-12411 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, tibco security, activespaces vulnerability","\u002Fwhat-is\u002Fcve-2018-12411",{"@context":106,"@type":107,"headline":101,"description":102,"datePublished":10,"dateModified":11,"author":108,"publisher":112,"about":116,"mainEntityOfPage":120,"articleSection":123,"keywords":124},"https:\u002F\u002Fschema.org","TechArticle",{"@type":109,"name":110,"url":111},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":109,"name":110,"url":111,"logo":113},{"@type":114,"url":115},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":117,"name":6,"description":118,"additionalType":119},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":121,"@id":122},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-12411","Cybersecurity","CVE-2018-12411, CVE-2018-12411 vulnerability, CVE-2018-12411 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[126],{"Operator":15,"Negate":15,"Nodes":127},[128],{"Operator":129,"Negate":15,"CPEMatch":130},"OR",[131,133,136,138,141,143,145,148,151,153,156,159,161,164],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":132,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"26A65290-4462-41FD-9602-4991D5A0D578",{"Vulnerable":4,"Criteria":134,"MatchCriteriaID":135,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:tibco:activespaces:3.0.0:*:*:*:enterprise:*:*:*","B6D969A4-95F9-4877-B4ED-4BC54F2A3D37",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":137,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"72D84F48-2BC1-44D4-BF57-4F53C921BF7D",{"Vulnerable":4,"Criteria":139,"MatchCriteriaID":140,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:tibco:activespaces:3.1.0:*:*:*:enterprise:*:*:*","DFD369AE-67CE-4CEA-B389-5CEBD48A8586",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":142,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"8AC19705-96A9-4752-A08F-DCBBEDBCCD5C",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":144,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"19990D0E-3616-4BEF-B695-7AA6092FC5E8",{"Vulnerable":4,"Criteria":146,"MatchCriteriaID":147,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:tibco:activespaces:3.3.0:*:*:*:developer:*:*:*","4F058395-B0FA-452E-AAEF-807E6A1E58C9",{"Vulnerable":4,"Criteria":149,"MatchCriteriaID":150,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:tibco:activespaces:3.3.0:*:*:*:enterprise:*:*:*","01C9B3B4-D5DB-4415-9994-C75B1BA97DAD",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":152,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"9BE529F2-0745-4942-9148-8AC62EEDE8D6",{"Vulnerable":4,"Criteria":154,"MatchCriteriaID":155,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:tibco:activespaces:3.4.0:*:*:*:developer:*:*:*","51203932-C85B-4E7C-A3AC-E30B5BC4CAA8",{"Vulnerable":4,"Criteria":157,"MatchCriteriaID":158,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:tibco:activespaces:3.4.0:*:*:*:enterprise:*:*:*","C3D9EF5F-9D55-40D3-BB9C-9156E7CAFDFD",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":160,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"97A8840C-082F-4E5A-8761-F785B4B128AF",{"Vulnerable":4,"Criteria":162,"MatchCriteriaID":163,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:tibco:activespaces:3.5.0:*:*:*:developer:*:*:*","F590E782-E08C-4756-9C5E-D53146043579",{"Vulnerable":4,"Criteria":165,"MatchCriteriaID":166,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:tibco:activespaces:3.5.0:*:*:*:enterprise:*:*:*","1ABC7D09-5465-415D-AC8B-B08AF42D500A",[],[],{"lastModified":11,"cacheTime":170,"version":40},1792378579040,{"score":172,"band":173,"action":174,"scoredAt":175},47,"Medium","Plan remediation","2026-10-16T06:45:08.122355+00:00"]