[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fFbYdjebVJwMOMxQqTfnSiA1Iq5plcwKfFeVAF68oAxw":3,"g5a-risk:CVE-2018-18814":154},{"success":4,"data":5,"meta":152},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":15,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":74,"references":75,"referencesCount":90,"weaknesses":91,"weaknessesCount":100,"isActivelyExploited":101,"cisaInfo":15,"otxData":15,"relatedBlogPosts":102,"seoMetadata":103,"configurations":128,"relatedVendorCves":150,"notableEvents":151},"CVE-2018-18814","What is CVE-2018-18814?","The TIBCO Spotfire authentication component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability in the handling of the authentication that theoretically may allow an attacker to gain full access to a target account, independent of configured authentication mechanisms. Affected releases are TIBCO Software Inc. TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 10.0.0, and TIBCO Spotfire Server: versions up to and including 7.10.1; 7.11.0; 7.11.1; 7.12.0; 7.13.0; 7.14.0.","The TIBCO Spotfire authentication component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contain...","2019-01-16T22:29:00.357","2019-10-09T23:37:26.943",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":38,"CVSSMetricV40":15},null,[17,30],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":37,"ImpactScore":29},"security@tibco.com","Secondary",{"Version":21,"VectorString":34,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":35,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":36,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H","REQUIRED",8.8,2.8,[39],{"Source":18,"Type":19,"CVSSData":40,"BaseSeverity":26,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":41,"VectorString":42,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":43,"IntegrityImpact":43,"AvailabilityImpact":43,"BaseScore":44,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.03097,[47,47,47,47,47,47,47],"Critical",[51,56,59,62,65,68,71],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"tibco","spotfire_analytics_platform_for_aws","*","cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:*:*:*:*:*:*:*:*",{"vendor":52,"product":57,"version":54,"criteria":58,"vulnerable":4},"spotfire_server","cpe:2.3:a:tibco:spotfire_server:*:*:*:*:*:*:*:*",{"vendor":52,"product":57,"version":60,"criteria":61,"vulnerable":4},"7.11.0","cpe:2.3:a:tibco:spotfire_server:7.11.0:*:*:*:*:*:*:*",{"vendor":52,"product":57,"version":63,"criteria":64,"vulnerable":4},"7.11.1","cpe:2.3:a:tibco:spotfire_server:7.11.1:*:*:*:*:*:*:*",{"vendor":52,"product":57,"version":66,"criteria":67,"vulnerable":4},"7.12.0","cpe:2.3:a:tibco:spotfire_server:7.12.0:*:*:*:*:*:*:*",{"vendor":52,"product":57,"version":69,"criteria":70,"vulnerable":4},"7.13.0","cpe:2.3:a:tibco:spotfire_server:7.13.0:*:*:*:*:*:*:*",{"vendor":52,"product":57,"version":72,"criteria":73,"vulnerable":4},"7.14.0","cpe:2.3:a:tibco:spotfire_server:7.14.0:*:*:*:*:*:*:*",7,[76,82,87],{"url":77,"source":78,"tags":79},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F106635","Securityfocus",[80,81],"Third Party Advisory","VDB Entry",{"url":83,"source":84,"tags":85},"http:\u002F\u002Fwww.tibco.com\u002Fservices\u002Fsupport\u002Fadvisories","Tibco",[86],"Vendor Advisory",{"url":88,"source":84,"tags":89},"https:\u002F\u002Fwww.tibco.com\u002Fsupport\u002Fadvisories\u002F2019\u002F01\u002Ftibco-security-advisory-january-16-2019-tibco-spotfire-2018-18814",[86],3,[92],{"id":93,"name":94,"description":95,"extendedDescription":96,"status":97,"abstraction":98,"structure":99},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",1,false,[],{"title":104,"metaDescription":105,"keywords":106,"canonicalUrl":107,"structuredData":108},"What is CVE-2018-18814? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-18814, a critical severity cyber security vulnerability from 2019. The TIBCO Spotfire authentication component of TIBCO So...","CVE-2018-18814, CVE-2018-18814 vulnerability, CVE-2018-18814 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, tibco security, spotfire_analytics_platform_for_aws vulnerability, spotfire_server vulnerability","\u002Fwhat-is\u002Fcve-2018-18814",{"@context":109,"@type":110,"headline":104,"description":105,"datePublished":10,"dateModified":11,"author":111,"publisher":115,"about":119,"mainEntityOfPage":123,"articleSection":126,"keywords":127},"https:\u002F\u002Fschema.org","TechArticle",{"@type":112,"name":113,"url":114},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":112,"name":113,"url":114,"logo":116},{"@type":117,"url":118},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":120,"name":6,"description":121,"additionalType":122},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":124,"@id":125},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-18814","Cybersecurity","CVE-2018-18814, CVE-2018-18814 vulnerability, CVE-2018-18814 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[129],{"Operator":15,"Negate":15,"Nodes":130},[131],{"Operator":132,"Negate":15,"CPEMatch":133},"OR",[134,137,140,142,144,146,148],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":135,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":136},"F1D10198-A17E-432F-BEB4-F98A8A067839","10.0.0",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":138,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":139},"BA796C00-8493-40A3-BE34-3B5703194E7A","7.10.1",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":141,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F60AE38F-9603-47B1-9451-6A9B9D8FC065",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":143,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"08AE8942-B051-4142-BFAE-5D47B883B7A7",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":145,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"0F59A46F-9E34-4354-AB7D-73A253014BA9",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":147,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"97B691A6-B273-4880-AD61-53169C4C3CEC",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":149,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"47E57AE2-D98C-4231-9E56-A5EE8B5BC0AF",[],[],{"lastModified":11,"cacheTime":153,"version":41},1792284945930,{"score":155,"band":156,"action":157,"scoredAt":158},54,"Medium","Plan remediation","2026-10-16T06:45:24.826349+00:00"]