01 Record

CVE-2020-9417

TIBCO Foresight SQL Injection

HighPUBLISHEDCNA: tibco

CNA base score7.6 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

View raw JSON

02 Description

TIBCO Foresight SQL Injection

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.87% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 56.1% of scored records. A rank, not a probability.
NVD base score: 8.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2020-10-20 21:13Z5 YR AGO

Last updated

2024-09-17 03:02Z1 YR AGO

Reserved

2020-02-26

Assigning CNA

tibco

Record state

PUBLISHED

Severity

High (CVSS 7.6)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

Weaknesses

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Base

Data version

5.1

Document digest

183d07d00055df77248cc122e885c39cb414c47529ff2a27257195808caaf062

05 Affected products

VendorProductVersionsPlatforms

TIBCO Software Inc.TIBCO Foresight Archive and Retrieval System<= 5.1.0, 5.2.0—

TIBCO Software Inc.TIBCO Foresight Archive and Retrieval System Healthcare Edition<= 5.1.0, 5.2.0—

TIBCO Software Inc.TIBCO Foresight Operational Monitor<= 5.1.0, 5.2.0—

TIBCO Software Inc.TIBCO Foresight Operational Monitor Healthcare Edition<= 5.1.0, 5.2.0—

TIBCO Software Inc.TIBCO Foresight Transaction Insight<= 5.1.0, 5.2.0—

TIBCO Software Inc.TIBCO Foresight Transaction Insight Healthcare Edition<= 5.1.0, 5.2.0—

06 References

www.tibco.comhttp://www.tibco.com/services/support/advisoriesx_refsource_CONFIRM

07 Remediation

TIBCO has released updated versions of the affected components which address these issues. TIBCO Foresight Archive and Retrieval System versions 5.1.0 and below update to version 5.1.1 or higher TIBCO Foresight Archive and Retrieval System version 5.2.0 update to version 5.2.1 or higher TIBCO Foresight Archive and Retrieval System Healthcare Edition versions 5.1.0 and below update to version 5.1.1 or higher TIBCO Foresight Archive and Retrieval System Healthcare Edition version 5.2.0 update to version 5.2.1 or higher TIBCO Foresight Operational Monitor versions 5.1.0 and below update to version 5.1.1 or higher TIBCO Foresight Operational Monitor version 5.2.0 update to version 5.2.1 or higher TIBCO Foresight Operational Monitor Healthcare Edition versions 5.1.0 and below update to version 5.1.1 or higher TIBCO Foresight Operational Monitor Healthcare Edition version 5.2.0 update to version 5.2.1 or higher TIBCO Foresight Transaction Insight versions 5.1.0 and below update to version 5.1.1 or higher TIBCO Foresight Transaction Insight version 5.2.0 update to version 5.2.1 or higher TIBCO Foresight Transaction Insight Healthcare Edition versions 5.1.0 and below update to version 5.1.1 or higher TIBCO Foresight Transaction Insight Healthcare Edition version 5.2.0 update to version 5.2.1 or higher

01 Record index

CVE-2020-9417

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

07 Remediation

02 Records

CVE-2020-9417

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

07 Remediation