Spotfire Analyst
Approved changes feed: RSS · Atom
cpe:2.3:a:tibco_software_inc.:spotfire_analyst:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Tibco Software Inc. (38407903-e3e7-5562-baac-15027d7f2ebf) |
|---|---|
| Product | Spotfire Analyst (24020910-d65d-5fa0-afa7-466563fe227d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-26221 |
vulnerable | 2026-06-08 05:57:38.927681 |
TIBCO Spotfire Insufficiently Protected Credential vulnerability
MEDIUM (5)
The Spotfire Connectors component of TIBCO Software Inc.'s Spotfire Analyst, Spotfire Server, and Spotfire for AWS Marketplace contains an easily exploitable vulnerability that allows a low privileged attacker with read/write access to craft malicious Analyst files. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s Spotfire Analyst: versions 12.3.0, 12.4.0, and 12.5.0, Spotfire Server: versions 12.3.0, 12.4.0, and 12.5.0, and Spotfire for AWS Marketplace: version 12.5.0.
Published: 2023-11-08T19:44:03.634Z
Updated: 2024-09-04T15:46:47.013Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-26220 |
vulnerable | 2026-06-08 05:57:38.899574 |
TIBCO Spotfire Stored Cross-site Scripting (XSS) vulnerability
MEDIUM (5.4)
The Spotfire Library component of TIBCO Software Inc.'s Spotfire Analyst and Spotfire Server contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s Spotfire Analyst: versions 11.4.7 and below, versions 11.5.0, 11.6.0, 11.7.0, 11.8.0, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4, versions 12.1.0 and 12.1.1 and Spotfire Server: versions 11.4.11 and below, versions 11.5.0, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.7.0, 11.8.0, 11.8.1, 12.0.0, 12.0.1, 12.0.2, 12.0.3, 12.0.4, and 12.0.5, versions 12.1.0 and 12.1.1.
Published: 2023-10-10T22:06:36.002Z
Updated: 2024-09-18T16:14:49.914Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.