CVE-2013-2373

2022-10-0316:15:00

mitre

www.cve.org

tibco spotfire web player

engine

access control

vulnerability

remote attackers

sensitive information

6.3 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

62.2%

JSON

The Engine in TIBCO Spotfire Web Player 3.3.x before 3.3.3, 4.0.x before 4.0.3, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 does not properly implement access control, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors.