CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. Exploitation may require the attacker to be authenticated.
CVE
CVE-2019-8987
Severity
MEDIUM
CVSS
5.4
EPSS
1.11%
Original NVD Description
The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a persistent cross-site scripting vulnerability that theoretically allows an authenticated user to gain access to all the capabilities of the web interface available to more privileged users. Affected releases are TIBCO Software Inc.'s TIBCO Data Science for AWS: versions up to and including 6.4.0, and TIBCO Spotfire Data Science: versions up to and including 6.4.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)