VULNERABILITY INTELLIGENCE

CVE-2018-5428

CVSS score8.8 HIGH

EPSS probability3.01%

CISA KEVNot currently listed

Published2018-06-20

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

The version control adapters component of TIBCO Data Virtualization (formerly known as Cisco Information Server) contains vulnerabilities that may allow for arbitrary command execution. Affected releases are TIBCO Data Virtualization: 7.0.5; 7.0.6.

Weakness classification

CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')

Primary references

security@tibco.com — Third Party Advisory, VDB Entry
security@tibco.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory