CVE-2018-12414

The Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezvous Cache (rvcache), and Rendezvous Daemon Manager (rvdm) components of TIBCO Software Inc.'s TIBCO Rendezvous, TIBCO Rendezvous Developer Edition, TIBCO Rendezvous for z/Linux, TIBCO Rendezvous for z/OS, TIBCO Rendezvous Network Server, TIBCO Substation ES contain vulnerabilities which may allow an attacker to perform cross-site request forgery (CSRF) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Rendezvous: versions up to and including 8.4.5, TIBCO Rendezvous Developer Edition: versions up to and including 8.4.5, TIBCO Rendezvous for z/Linux: versions up to and including 8.4.5, TIBCO Rendezvous for z/OS: versions up to and including 8.4.5, TIBCO Rendezvous Network Server: versions up to and including 1.1.2, and TIBCO Substation ES: versions up to and including 2.12.2.

• CWE-352

• http://www.securityfocus.com/bid/105871Third Party Advisory, VDB Entry
• http://www.tibco.com/services/support/advisoriesVendor Advisory
• https://www.tibco.com/support/advisories/2018/11/tibco-security-advisory-november-6-2018-tibco-rendezvousVendor Advisory
• http://www.securityfocus.com/bid/105871Third Party Advisory, VDB Entry
• http://www.tibco.com/services/support/advisoriesVendor Advisory
• https://www.tibco.com/support/advisories/2018/11/tibco-security-advisory-november-6-2018-tibco-rendezvousVendor Advisory

Published

Nov 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12409The SOAP Admin API component of TIBCO Software Inc.'s TIBCO …
• CVE-2018-1241Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoi…
• CVE-2018-12410The web server component of TIBCO Software Inc's Spotfire St…9.8
• CVE-2018-12411The administrative daemon (tibdgadmind) of TIBCO Software In…7.5
• CVE-2018-12412The realm server (tibrealmserver) component of TIBCO Softwar…7.5
• CVE-2018-12413The Schema repository server (tibschemad) component of TIBCO…7.5
• CVE-2018-12415The Central Administration server (emsca) component of TIBCO…7.5
• CVE-2018-12416The GridServer Broker and GridServer Director components of …7.1
• CVE-2018-12417Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-12418Archive.java in Junrar before 1.0.1, as used in Apache Tika …
• CVE-2018-1242Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoi…
• CVE-2018-12420IceHrm before 23.0.1.OS has a risky usage of a hashed passwo…