CVE-2018-18807: TIBCO Statistica Server

Medium severity, CVSS 5.4. EPSS: 1.2% chance of exploitation in the next 30 days.

The web application of the TIBCO Statistica component of TIBCO Software Inc.'s TIBCO Statistica Server contains vulnerabilities which may allow an authenticated user to perform cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Statistica Server versions up to and including 13.4.0.

Affected products

• TIBCO Statistica Server: up to and including 13.4.0

Published 2018-11-26. Last modified 2026-06-17.