Read the docs

TIBCO

Records236All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical52CVSS 9.0–10.0
CVSS high109CVSS 7.0–8.9

Exploited now

TIBCO records in CISA KEV
TI-2018-13320 TIBCO JasperReports Library Directory Traversal Vulnerability Priority CRITICAL 88KEV 2022-12-29TI-2018-03944 TIBCO JasperReports Server Information Disclosure Vulnerability Priority CRITICAL 95KEV 2022-12-29

Components

Products in the NVD configurations · select one to filter the records
Spotfire Server 28 records MEDIUM Jasperreports Server 22 records CRITICAL Spotfire Analytics Platform For Aws 20 records MEDIUM Rendezvous 16 records MEDIUM Spotfire Analyst 12 records MEDIUM Enterprise Message Service 11 records MEDIUM Jaspersoft 10 records CRITICAL Jaspersoft Reporting And Analytics 10 records CRITICAL

Records

12 records in Spotfire Analyst · all components

TI-2018-03949 CVE-2018-5435 · GHSA-3f6h-wmwv-m6rx

TIBCO Spotfire Product Family Remote Code Execution Vulnerability

Priority MEDIUM 48

The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotf…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03243 Published 2018-06-27 No fix listed
TI-2017-02386 CVE-2017-3181 · GHSA-gxcx-xp38-vxx9

SQL injection in TIBCO Spotfire Analyst

Priority MEDIUM 45

Multiple TIBCO Products are prone to multiple unspecified SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01691 Published 2018-07-24 No fix listed CWE-89
TI-2025-02720 CVE-2025-3115 · GHSA-4gxx-54gw-qwch

Spotfire Data Function Vulnerability

Priority MEDIUM 44

Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00684 Published 2025-04-09 Fixed in 14.0.7, 14.0.6 +2 CWE-94
TI-2022-19963 CVE-2022-41558 · GHSA-f97f-pq83-h6fq

TIBCO Spotfire Stored Cross Site Scripting (XSS) Vulnerability

Priority MEDIUM 42

The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, TIBCO Spotfire…

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00543 Published 2022-11-15 No fix listed CWE-79
TI-2018-03951 CVE-2018-5437 · GHSA-5qv7-rfm2-p257

TIBCO Spotfire Product Family Information Disclosure Vulnerability

Priority MEDIUM 40

The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotf…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00931 Published 2018-06-27 No fix listed
TI-2019-12932 CVE-2019-17334 · GHSA-p7qv-f46f-46p7

TIBCO Spotfire Analyst and Desktop Remote Code Execution Via Shared Files

Priority LOW 37

The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfire Desktop Langu…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00962 Published 2019-12-17 No fix listed CWE-276
TI-2021-06011 CVE-2021-23273 · GHSA-gp35-g437-wqxw

TIBCO Spotfire Cross Site Scripting Vulnerability

Priority LOW 36

The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, and TIBCO Spotfire Server contains a vulnerability that theore…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00662 Published 2021-03-09 No fix listed CWE-79
TI-2020-07532 CVE-2020-9416 · GHSA-vx8r-4fwr-hc2v

TIBCO Spotfire Stored Cross Site Scripting Vulnerability

Priority LOW 36

The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, and TIBCO Spotfire Server contains a vulnerability that theore…

CVSS 3.1HIGH 8.2 Network Low privileges User interaction EPSS 0.0057 Published 2020-09-15 No fix listed CWE-79
TI-2023-11400 CVE-2023-26220 · GHSA-p4rg-7c2h-6cqp

TIBCO Spotfire Stored Cross-site Scripting (XSS) vulnerability

Priority LOW 24

The Spotfire Library component of TIBCO Software Inc.'s Spotfire Analyst and Spotfire Server contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a Stored Cros…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00347 Published 2023-10-10 No fix listed CWE-79
TI-2023-11401 CVE-2023-26221 · GHSA-5fvg-7q6x-mgh2

TIBCO Spotfire Insufficiently Protected Credential vulnerability

Priority LOW 22

The Spotfire Connectors component of TIBCO Software Inc.'s Spotfire Analyst, Spotfire Server, and Spotfire for AWS Marketplace contains an easily exploitable vulnerability that allows a low privileged attacker with read/…

CVSS 3.1MEDIUM 5.0 Local No auth User interaction EPSS 0.00186 Published 2023-11-08 No fix listed CWE-522
Open these records in search →