TIBCO

Records236All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical52CVSS 9.0–10.0

CVSS high109CVSS 7.0–8.9

Exploited now

TIBCO records in CISA KEV

TI-2018-13320 TIBCO JasperReports Library Directory Traversal Vulnerability CRITICAL 88KEV 2022-12-29 TI-2018-03944 TIBCO JasperReports Server Information Disclosure Vulnerability CRITICAL 95KEV 2022-12-29

Components

Products in the NVD configurations · select one to filter the records

Spotfire Server 28 records MEDIUM Jasperreports Server 22 records CRITICAL Spotfire Analytics Platform For Aws 20 records MEDIUM Rendezvous 16 records MEDIUM Spotfire Analyst 12 records MEDIUM Enterprise Message Service 11 records MEDIUM Jaspersoft 10 records CRITICAL Jaspersoft Reporting And Analytics 10 records CRITICAL

Records

20 records in Spotfire Analytics Platform For Aws · all components

TI-2019-08389 CVE-2019-11211 · GHSA-9636-qqqx-549h

TIBCO Enterprise Runtime for R Server Running On Linux With Containerized TERR Service…

MEDIUM 49

The server component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, and TIBCO Spotfire Analytics Platform for AWS Marketplace contains a vulnerability that theoretically allows an authenticated…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.03723 Published 2019-09-18 No fix listed

TI-2019-08388 CVE-2019-11210 · GHSA-g2pq-36f3-2p66

TIBCO Enterprise Runtime for R Server Exposes Remote Code Execution

MEDIUM 49

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03661 Published 2019-09-18 No fix listed

TI-2018-13324 CVE-2018-18814 · GHSA-8qff-6cx7-vmmv

TIBCO Spotfire Authentication Vulnerability

MEDIUM 48

The TIBCO Spotfire authentication component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability in the handling of the authentication that th…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03097 Published 2019-01-16 No fix listed CWE-287

TI-2018-03949 CVE-2018-5435 · GHSA-3f6h-wmwv-m6rx

TIBCO Spotfire Product Family Remote Code Execution Vulnerability

MEDIUM 48

The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotf…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03243 Published 2018-06-27 No fix listed

TI-2020-07524 CVE-2020-9408 · GHSA-xh75-j2qv-65qf

TIBCO Spotfire Server Script Trust Problem Exposes Remote Code Execution Vulnerability

MEDIUM 41

The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theoretically allows an attacker with write permission…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01268 Published 2020-03-11 No fix listed CWE-276

TI-2019-08383 CVE-2019-11205 · GHSA-c4r2-c7vr-q2c9

TIBCO Spotfire Server Exposes Multiple Reflected Cross-Site Scripting Vulnerabilities

MEDIUM 41

The web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow reflected cross-site scripting (XSS) at…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01267 Published 2019-05-14 No fix listed CWE-79

TI-2018-13323 CVE-2018-18813 · GHSA-hfh6-wr2c-5p4w

TIBCO Spotfire Reflected and Persistent Cross-Site Scripting Vulnerabilities

MEDIUM 41

The Spotfire web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains multiple vulnerabilities that may allow persistent and reflected cross-…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0148 Published 2019-01-16 No fix listed CWE-79

TI-2018-03951 CVE-2018-5437 · GHSA-5qv7-rfm2-p257

TIBCO Spotfire Product Family Information Disclosure Vulnerability

MEDIUM 40

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00931 Published 2018-06-27 No fix listed

TI-2018-03950 CVE-2018-5436 · GHSA-3xc7-x46v-p5qp

TIBCO Spotfire Server information disclosure vulnerabilities

MEDIUM 40

The Spotfire server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contain multiple vulnerabilities that may allow for the disclosure of information, i…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01007 Published 2018-06-27 No fix listed CWE-200

TI-2015-03831 CVE-2015-4554 · GHSA-vmxr-4rf6-8xp4

Multiple unspecified vulnerabilities in TIBCO Spotfire Client and Spotfire Web Player…

LOW 39

Multiple unspecified vulnerabilities in TIBCO Spotfire Client and Spotfire Web Player Client in Spotfire Analyst before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; Spotfire Analytics Platform f…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03468 Published 2015-07-21 No fix listed

TI-2019-12932 CVE-2019-17334 · GHSA-p7qv-f46f-46p7

TIBCO Spotfire Analyst and Desktop Remote Code Execution Via Shared Files

LOW 37

The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfire Desktop Langu…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00962 Published 2019-12-17 No fix listed CWE-276

TI-2019-12934 CVE-2019-17336 · GHSA-hvfq-g7hx-jhrh

TIBCO Spotfire Web Player Potentially Exposes Credentials For Shared Data Sources

LOW 31

The Data access layer component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains multiple vulnerabilities that theoretically allow an attacker access to in…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00883 Published 2019-12-17 No fix listed

TI-2018-13322 CVE-2018-18812 · GHSA-hx95-mp9p-369r

TIBCO Spotfire Fails To Prevent Write Access to Spotfire Library

LOW 31

The Spotfire Library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability that might theoretically fail to restrict users with read-…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01158 Published 2019-01-16 No fix listed CWE-732

TI-2017-03542 CVE-2017-5527 · GHSA-cfr5-rfj7-vjc4

TIBCO Spotfire injection vulnerabilities

LOW 31

TIBCO Spotfire Server 7.0.X before 7.0.2, 7.5.x before 7.5.1, 7.6.x before 7.6.1, 7.7.x before 7.7.1, and 7.8.x before 7.8.1 and Spotfire Analytics Platform for AWS Marketplace 7.8.0 and earlier contain multiple vulnerab…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00921 Published 2017-05-09 No fix listed CWE-89

TI-2019-12933 CVE-2019-17335 · GHSA-mjxw-wvmv-64gf

TIBCO Spotfire Server Exposes User-Specific Cached Data To Others Users

LOW 30

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00796 Published 2019-12-17 No fix listed

TI-2019-08384 CVE-2019-11206 · GHSA-mj38-74cg-x364

TIBCO Spotfire Server Vulnerabilities With Integrity of Comments and Bookmarks

LOW 27

The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow a malicious user to undermine the…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01613 Published 2019-05-14 No fix listed

TI-2015-04815 CVE-2015-5713 · GHSA-h925-5cr3-xq56

Spotfire Parsing Library and Spotfire Security Filter in TIBCO Spotfire Server 5.5.x…

LOW 27

Spotfire Parsing Library and Spotfire Security Filter in TIBCO Spotfire Server 5.5.x before 5.5.4, 6.0.x before 6.0.5, 6.5.x before 6.5.4, and 7.0.x before 7.0.1 and Spotfire Analytics Platform before 7.0.2 for AWS Marke…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02133 Published 2015-10-28 No fix listed CWE-200

TI-2019-12935 CVE-2019-17337 · GHSA-2rf2-mpmq-65hv

TIBCO Spotfire Server Library Vulnerable to Reflected Cross-Site Scripting

LOW 26

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00727 Published 2019-12-17 No fix listed CWE-79

TI-2017-02385 CVE-2017-3180 · GHSA-fw63-53rx-w22v

Multiple TIBCO Spotfire components fail to sanitize user-supplied inout and are vulnerable to cross-site scripting

LOW 25

Multiple TIBCO Products are prone to multiple unspecified cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00608 Published 2018-07-24 No fix listed CWE-20

TI-2015-04814 CVE-2015-5712 · GHSA-vxr6-fv68-2p5q

Spotfire Parsing Library and Spotfire Security Filter in TIBCO Spotfire Server 5.5.x…

LOW 22

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01687 Published 2015-10-28 No fix listed CWE-200

Open these records in search →