CVE-2018-18807 – TIBCO Statistica Server Vulnerable to Cross Site Scripting

https://notcve.org/view.php?id=CVE-2018-18807

26 Nov 2018 — The web application of the TIBCO Statistica component of TIBCO Software Inc.'s TIBCO Statistica Server contains vulnerabilities which may allow an authenticated user to perform cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Statistica Server versions up to and including 13.4.0. La aplicación web del componente TIBCO Statistica, del servidor TIBCO Statistica de TIBCO Software Inc., contiene vulnerabilidades que podrían permitir a un usuario autenticado realizar ataques ... • http://www.securityfocus.com/bid/106021 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •