Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

12 records

Vendor: TIBCO Component: Spotfire Analyst Clear all filters
TI-2025-02720 CVE-2025-3115 · GHSA-4gxx-54gw-qwch

Spotfire Data Function Vulnerability

Priority MEDIUM 44

Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00684 Published 2025-04-09 Fixed in 14.0.7, 14.0.6 +2 CWE-94
TI-2023-11401 CVE-2023-26221 · GHSA-5fvg-7q6x-mgh2

TIBCO Spotfire Insufficiently Protected Credential vulnerability

Priority LOW 22

The Spotfire Connectors component of TIBCO Software Inc.'s Spotfire Analyst, Spotfire Server, and Spotfire for AWS Marketplace contains an easily exploitable vulnerability that allows a low privileged attacker with read/…

CVSS 3.1MEDIUM 5.0 Local No auth User interaction EPSS 0.00186 Published 2023-11-08 No fix listed CWE-522
TI-2023-11400 CVE-2023-26220 · GHSA-p4rg-7c2h-6cqp

TIBCO Spotfire Stored Cross-site Scripting (XSS) vulnerability

Priority LOW 24

The Spotfire Library component of TIBCO Software Inc.'s Spotfire Analyst and Spotfire Server contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a Stored Cros…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00347 Published 2023-10-10 No fix listed CWE-79
TI-2022-19963 CVE-2022-41558 · GHSA-f97f-pq83-h6fq

TIBCO Spotfire Stored Cross Site Scripting (XSS) Vulnerability

Priority MEDIUM 42

The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, TIBCO Spotfire…

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00543 Published 2022-11-15 No fix listed CWE-79
TI-2021-06011 CVE-2021-23273 · GHSA-gp35-g437-wqxw

TIBCO Spotfire Cross Site Scripting Vulnerability

Priority LOW 36

The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, and TIBCO Spotfire Server contains a vulnerability that theore…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00662 Published 2021-03-09 No fix listed CWE-79
TI-2020-07532 CVE-2020-9416 · GHSA-vx8r-4fwr-hc2v

TIBCO Spotfire Stored Cross Site Scripting Vulnerability

Priority LOW 36

The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, and TIBCO Spotfire Server contains a vulnerability that theore…

CVSS 3.1HIGH 8.2 Network Low privileges User interaction EPSS 0.0057 Published 2020-09-15 No fix listed CWE-79
TI-2019-12932 CVE-2019-17334 · GHSA-p7qv-f46f-46p7

TIBCO Spotfire Analyst and Desktop Remote Code Execution Via Shared Files

Priority LOW 37

The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfire Desktop Langu…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00962 Published 2019-12-17 No fix listed CWE-276
TI-2017-02386 CVE-2017-3181 · GHSA-gxcx-xp38-vxx9

SQL injection in TIBCO Spotfire Analyst

Priority MEDIUM 45

Multiple TIBCO Products are prone to multiple unspecified SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01691 Published 2018-07-24 No fix listed CWE-89
TI-2018-03951 CVE-2018-5437 · GHSA-5qv7-rfm2-p257

TIBCO Spotfire Product Family Information Disclosure Vulnerability

Priority MEDIUM 40

The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotf…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00931 Published 2018-06-27 No fix listed
TI-2018-03949 CVE-2018-5435 · GHSA-3f6h-wmwv-m6rx

TIBCO Spotfire Product Family Remote Code Execution Vulnerability

Priority MEDIUM 48

The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotf…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03243 Published 2018-06-27 No fix listed