TIBCO Spotfire Server 10.2.1
Approved changes feed: RSS · Atom
cpe:2.3:a:tibco:spotfire_server:10.2.1:*:*:*:*:*:*:*
part: a version: 10.2.1 update: *
| Vendor | Tibco (92ae8683-1e4a-52cf-ae60-583c5fda0048) |
|---|---|
| Product | Spotfire Server (3a9f3b58-c351-5f42-8c9a-714716c06745) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-17337 |
vulnerable | 2026-06-08 05:13:10.287417 |
TIBCO Spotfire Server Library Vulnerable to Reflected Cross-Site Scripting
HIGH (8.1)
The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theoretically allows an attacker to perform a reflected cross-site scripting (XSS) attack. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: version 10.6.0 and TIBCO Spotfire Server: versions 7.11.7 and below, versions 7.12.0, 7.13.0, 7.14.0, 10.0.0, 10.0.1, 10.1.0, 10.2.0, 10.2.1, 10.3.0, 10.3.1, 10.3.2, 10.3.3, and 10.3.4, versions 10.4.0, 10.5.0, and 10.6.0.
Published: 2019-12-17T20:55:18.595Z
Updated: 2024-09-16T21:02:56.222Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17336 |
vulnerable | 2026-06-08 05:13:10.285979 |
TIBCO Spotfire Web Player Potentially Exposes Credentials For Shared Data Sources
HIGH (7.7)
The Data access layer component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains multiple vulnerabilities that theoretically allow an attacker access to information that can lead to obtaining credentials used to access Spotfire data sources. The attacker would need privileges to save a Spotfire file to the library, and only applies in a situation where NTLM credentials, or a credentials profile is in use. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: version 10.6.0 and TIBCO Spotfire Server: versions 7.11.7 and below, versions 7.12.0, 7.13.0, 7.14.0, 10.0.0, 10.0.1, 10.1.0, 10.2.0, 10.2.1, 10.3.0, 10.3.1, 10.3.2, 10.3.3, and 10.3.4, versions 10.4.0, 10.5.0, and 10.6.0.
Published: 2019-12-17T20:55:18.061Z
Updated: 2024-09-17T02:06:23.402Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17335 |
vulnerable | 2026-06-08 05:13:10.280454 |
TIBCO Spotfire Server Exposes User-Specific Cached Data To Others Users
MEDIUM (5.3)
The Data access layer component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains multiple vulnerabilities that theoretically allow an attacker access to data cached from a data source, or a portion of a data source, that the attacker should not have access to. The attacker would need privileges to save a Spotfire file to the library. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: version 10.6.0 and TIBCO Spotfire Server: versions 7.11.7 and below, versions 7.12.0, 7.13.0, 7.14.0, 10.0.0, 10.0.1, 10.1.0, 10.2.0, 10.2.1, 10.3.0, 10.3.1, 10.3.2, 10.3.3, and 10.3.4, versions 10.4.0, 10.5.0, and 10.6.0.
Published: 2019-12-17T20:55:17.568Z
Updated: 2024-09-16T20:58:01.616Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.