GCVE - cpe:2.3:a:tibco:spotfire_server:3.3.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:tibco:spotfire_server:3.3.0:*:*:*:*:*:*:*

part: a version: 3.3.0 update: *

Vendor	Tibco (`92ae8683-1e4a-52cf-ae60-583c5fda0048`)
Product	Spotfire Server (`3a9f3b58-c351-5f42-8c9a-714716c06745`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-0690`	vulnerable	2026-06-08 05:00:44.496983	Details available TIBCO Spotfire Web Application, Web Player Application, Automation Services Application, and Analytics Client Application in Spotfire Analytics Server before 10.1.2; Server before 3.3.3; and Web Player, Automation Services, and Professional before 4.0.2 allow remote attackers to obtain sensitive information via a crafted URL. Published: 2012-03-13T10:00:00.000Z Updated: 2024-09-17T01:41:36.443Z Open on db.gcve.eu Reference links http://www.tibco.com/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp http://www.tibco.com/multimedia/spotfire_advisory_20120308_tcm8-15731.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3134`	vulnerable	2026-06-08 04:58:10.732498	Details available Unspecified vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to modify data or obtain sensitive information via a crafted URL. Published: 2011-09-02T16:00:00.000Z Updated: 2024-08-06T23:22:27.593Z Open on db.gcve.eu Reference links http://www.tibco.com/services/support/advisories/default.jsp http://www.securitytracker.com/id?1025999 http://secunia.com/advisories/45864 http://www.tibco.com/multimedia/spotfire_advisory_20110831_tcm8-14230.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3133`	vulnerable	2026-06-08 04:58:10.732009	Details available Session fixation vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to hijack web sessions via unspecified vectors. Published: 2011-09-02T16:00:00.000Z Updated: 2024-08-06T23:22:27.616Z Open on db.gcve.eu Reference links http://www.tibco.com/services/support/advisories/default.jsp http://www.securitytracker.com/id?1025999 http://secunia.com/advisories/45864 http://www.tibco.com/multimedia/spotfire_advisory_20110831_tcm8-14230.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3132`	vulnerable	2026-06-08 04:58:10.731453	Details available Cross-site scripting (XSS) vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2011-09-02T16:00:00.000Z Updated: 2024-08-06T23:22:27.593Z Open on db.gcve.eu Reference links http://www.tibco.com/services/support/advisories/default.jsp http://www.securitytracker.com/id?1025999 http://secunia.com/advisories/45864 http://www.tibco.com/multimedia/spotfire_advisory_20110831_tcm8-14230.txt	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.