Approved changes feed: RSS · Atom

cpe:2.3:a:tibco:spotfire_server:7.11.0:*:*:*:*:*:*:*

part: a version: 7.11.0 update: *

VendorTibco (92ae8683-1e4a-52cf-ae60-583c5fda0048)
ProductSpotfire Server (3a9f3b58-c351-5f42-8c9a-714716c06745)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-5436 vulnerable 2026-06-08 05:11:50.989014 TIBCO Spotfire Server information disclosure vulnerabilities
MEDIUM (6.5)
The Spotfire server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contain multiple vulnerabilities that may allow for the disclosure of information, including user and data source credentials. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 7.12.0, TIBCO Spotfire Server: versions up to and including 7.8.1; 7.9.0; 7.10.0; 7.11.0; 7.12.0.
Published: 2018-06-27T16:00:00.000Z
Updated: 2024-09-17T01:26:22.747Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18814 vulnerable 2026-06-08 05:11:14.782826 TIBCO Spotfire Authentication Vulnerability
HIGH (8.8)
The TIBCO Spotfire authentication component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability in the handling of the authentication that theoretically may allow an attacker to gain full access to a target account, independent of configured authentication mechanisms. Affected releases are TIBCO Software Inc. TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 10.0.0, and TIBCO Spotfire Server: versions up to and including 7.10.1; 7.11.0; 7.11.1; 7.12.0; 7.13.0; 7.14.0.
Published: 2019-01-16T22:00:00.000Z
Updated: 2024-09-17T01:20:31.366Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18813 vulnerable 2026-06-08 05:11:14.781690 TIBCO Spotfire Reflected and Persistent Cross-Site Scripting Vulnerabilities
HIGH (8.8)
The Spotfire web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains multiple vulnerabilities that may allow persistent and reflected cross-site scripting attacks. Affected releases are TIBCO Software Inc. TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 10.0.0, and TIBCO Spotfire Server: versions up to and including 7.10.1; 7.11.0; 7.11.1; 7.12.0; 7.13.0; 7.14.0; 10.0.0.
Published: 2019-01-16T22:00:00.000Z
Updated: 2024-09-17T00:51:13.618Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18812 vulnerable 2026-06-08 05:11:14.776165 TIBCO Spotfire Fails To Prevent Write Access to Spotfire Library
MEDIUM (6.5)
The Spotfire Library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability that might theoretically fail to restrict users with read-only access from modifying files stored in the Spotfire Library, only when the Spotfire Library is configured to use external storage. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace versions up to and including 10.0.0, and TIBCO Spotfire Server versions up to and including 7.10.1; 7.11.0; 7.11.1; 7.12.0; 7.13.0; 7.14.0; 10.0.0.
Published: 2019-01-16T22:00:00.000Z
Updated: 2024-09-17T01:46:57.774Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.