TIBCO

Records236All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical52CVSS 9.0–10.0

CVSS high109CVSS 7.0–8.9

Exploited now

TIBCO records in CISA KEV

TI-2018-13320 TIBCO JasperReports Library Directory Traversal Vulnerability CRITICAL 88KEV 2022-12-29 TI-2018-03944 TIBCO JasperReports Server Information Disclosure Vulnerability CRITICAL 95KEV 2022-12-29

Components

Products in the NVD configurations · select one to filter the records

Spotfire Server 28 records MEDIUM Jasperreports Server 22 records CRITICAL Spotfire Analytics Platform For Aws 20 records MEDIUM Rendezvous 16 records MEDIUM Spotfire Analyst 12 records MEDIUM Enterprise Message Service 11 records MEDIUM Jaspersoft 10 records CRITICAL Jaspersoft Reporting And Analytics 10 records CRITICAL

Records

28 records in Spotfire Server · all components

TI-2018-13324 CVE-2018-18814 · GHSA-8qff-6cx7-vmmv

TIBCO Spotfire Authentication Vulnerability

MEDIUM 48

The TIBCO Spotfire authentication component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability in the handling of the authentication that th…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03097 Published 2019-01-16 No fix listed CWE-287

TI-2022-19963 CVE-2022-41558 · GHSA-f97f-pq83-h6fq

TIBCO Spotfire Stored Cross Site Scripting (XSS) Vulnerability

MEDIUM 42

The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, TIBCO Spotfire…

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00543 Published 2022-11-15 No fix listed CWE-79

TI-2020-07524 CVE-2020-9408 · GHSA-xh75-j2qv-65qf

TIBCO Spotfire Server Script Trust Problem Exposes Remote Code Execution Vulnerability

MEDIUM 41

The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theoretically allows an attacker with write permission…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01268 Published 2020-03-11 No fix listed CWE-276

TI-2019-08383 CVE-2019-11205 · GHSA-c4r2-c7vr-q2c9

TIBCO Spotfire Server Exposes Multiple Reflected Cross-Site Scripting Vulnerabilities

MEDIUM 41

The web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow reflected cross-site scripting (XSS) at…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01267 Published 2019-05-14 No fix listed CWE-79

TI-2018-13323 CVE-2018-18813 · GHSA-hfh6-wr2c-5p4w

TIBCO Spotfire Reflected and Persistent Cross-Site Scripting Vulnerabilities

MEDIUM 41

The Spotfire web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains multiple vulnerabilities that may allow persistent and reflected cross-…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0148 Published 2019-01-16 No fix listed CWE-79

TI-2018-03950 CVE-2018-5436 · GHSA-3xc7-x46v-p5qp

TIBCO Spotfire Server information disclosure vulnerabilities

MEDIUM 40

The Spotfire server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contain multiple vulnerabilities that may allow for the disclosure of information, i…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01007 Published 2018-06-27 No fix listed CWE-200

TI-2021-09821 CVE-2021-28830 · GHSA-6rjr-cg8x-gc8f

TIBCO Spotfire Windows Platform Artifact Search vulnerability

LOW 38

The TIBCO Spotfire Server and TIBCO Enterprise Runtime for R components of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00251 Published 2021-06-29 No fix listed

TI-2014-02046 CVE-2014-2544 · GHSA-c8rv-f2vp-3ch5

Unspecified vulnerability in Spotfire Web Player Engine, Spotfire Desktop, and Spotfire…

LOW 38

Unspecified vulnerability in Spotfire Web Player Engine, Spotfire Desktop, and Spotfire Server Authentication Module in TIBCO Spotfire Server 3.3.x before 3.3.4, 4.5.x before 4.5.1, 5.0.x before 5.0.2, 5.5.x before 5.5.1…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03123 Published 2014-04-09 No fix listed

TI-2022-12725 CVE-2022-30579 · GHSA-3j96-4r54-mhqg

TIBCO Spotfire Server Blind SSRF vulnerability

LOW 37

The Web Player component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows a low privileged attacker with n…

CVSS 3.1HIGH 8.4 Network Low privileges No interaction EPSS 0.00588 Published 2022-09-20 No fix listed CWE-918

TI-2021-06013 CVE-2021-23275 · GHSA-vm2c-v328-xcwc

TIBCO Spotfire Windows Platform Installation vulnerability

LOW 37

The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Spotfir…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00219 Published 2021-06-29 No fix listed CWE-732

TI-2014-04317 CVE-2014-5285 · GHSA-hm6p-rhcp-2rrf

Unspecified vulnerability in the Authentication Module in TIBCO Spotfire Server before…

LOW 37

Unspecified vulnerability in the Authentication Module in TIBCO Spotfire Server before 4.5.2, 5.0.x before 5.0.3, 5.5.x before 5.5.2, 6.0.x before 6.0.3, and 6.5.x before 6.5.1 allows remote attackers to gain privileges,…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02008 Published 2014-09-04 No fix listed

TI-2011-02765 CVE-2011-3134 · GHSA-h22m-ch2c-256j

Unspecified vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before…

LOW 37

Unspecified vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to modify data o…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02201 Published 2011-09-02 No fix listed

TI-2021-06011 CVE-2021-23273 · GHSA-gp35-g437-wqxw

TIBCO Spotfire Cross Site Scripting Vulnerability

LOW 36

The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, and TIBCO Spotfire Server contains a vulnerability that theore…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00662 Published 2021-03-09 No fix listed CWE-79

TI-2020-07532 CVE-2020-9416 · GHSA-vx8r-4fwr-hc2v

TIBCO Spotfire Stored Cross Site Scripting Vulnerability

LOW 36

CVSS 3.1HIGH 8.2 Network Low privileges User interaction EPSS 0.0057 Published 2020-09-15 No fix listed CWE-79

TI-2021-19117 CVE-2021-43051 · GHSA-j7vq-gw7g-j543

TIBCO Spotfire Server API Authorization Vulnerability

LOW 33

The Spotfire Server component of TIBCO Software Inc.'s TIBCO Spotfire Server, TIBCO Spotfire Server, and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows malicious custom API clients with n…

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.0085 Published 2021-12-14 No fix listed

TI-2019-12934 CVE-2019-17336 · GHSA-hvfq-g7hx-jhrh

TIBCO Spotfire Web Player Potentially Exposes Credentials For Shared Data Sources

LOW 31

The Data access layer component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains multiple vulnerabilities that theoretically allow an attacker access to in…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00883 Published 2019-12-17 No fix listed

TI-2018-13322 CVE-2018-18812 · GHSA-hx95-mp9p-369r

TIBCO Spotfire Fails To Prevent Write Access to Spotfire Library

LOW 31

The Spotfire Library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability that might theoretically fail to restrict users with read-…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01158 Published 2019-01-16 No fix listed CWE-732

TI-2017-03542 CVE-2017-5527 · GHSA-cfr5-rfj7-vjc4

TIBCO Spotfire injection vulnerabilities

LOW 31

TIBCO Spotfire Server 7.0.X before 7.0.2, 7.5.x before 7.5.1, 7.6.x before 7.6.1, 7.7.x before 7.7.1, and 7.8.x before 7.8.1 and Spotfire Analytics Platform for AWS Marketplace 7.8.0 and earlier contain multiple vulnerab…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00921 Published 2017-05-09 No fix listed CWE-89

TI-2019-12933 CVE-2019-17335 · GHSA-mjxw-wvmv-64gf

TIBCO Spotfire Server Exposes User-Specific Cached Data To Others Users

LOW 30

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00796 Published 2019-12-17 No fix listed

TI-2019-08384 CVE-2019-11206 · GHSA-mj38-74cg-x364

TIBCO Spotfire Server Vulnerabilities With Integrity of Comments and Bookmarks

LOW 27

The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow a malicious user to undermine the…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01613 Published 2019-05-14 No fix listed

TI-2015-04815 CVE-2015-5713 · GHSA-h925-5cr3-xq56

Spotfire Parsing Library and Spotfire Security Filter in TIBCO Spotfire Server 5.5.x…

LOW 27

Spotfire Parsing Library and Spotfire Security Filter in TIBCO Spotfire Server 5.5.x before 5.5.4, 6.0.x before 6.0.5, 6.5.x before 6.5.4, and 7.0.x before 7.0.1 and Spotfire Analytics Platform before 7.0.2 for AWS Marke…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02133 Published 2015-10-28 No fix listed CWE-200

TI-2019-12935 CVE-2019-17337 · GHSA-2rf2-mpmq-65hv

TIBCO Spotfire Server Library Vulnerable to Reflected Cross-Site Scripting

LOW 26

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00727 Published 2019-12-17 No fix listed CWE-79

TI-2012-00635 CVE-2012-0690 · GHSA-rr5c-m8q3-2x6w

TIBCO Spotfire Web Application, Web Player Application, Automation Services Application…

LOW 26

TIBCO Spotfire Web Application, Web Player Application, Automation Services Application, and Analytics Client Application in Spotfire Analytics Server before 10.1.2; Server before 3.3.3; and Web Player, Automation Servic…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01557 Published 2012-03-13 No fix listed CWE-200

TI-2023-11400 CVE-2023-26220 · GHSA-p4rg-7c2h-6cqp

TIBCO Spotfire Stored Cross-site Scripting (XSS) vulnerability

LOW 24

The Spotfire Library component of TIBCO Software Inc.'s Spotfire Analyst and Spotfire Server contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a Stored Cros…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00347 Published 2023-10-10 No fix listed CWE-79

TI-2011-02764 CVE-2011-3133 · GHSA-389m-cgpc-f2xq

Session fixation vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before…

LOW 23

Session fixation vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to hijack w…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01702 Published 2011-09-02 No fix listed

Open these records in search →