Input validation

The server component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, and TIBCO Spotfire Analytics Platform for AWS Marketplace contains a vulnerability that theoretically allows an authenticated user to trigger remote code execution in certain circumstances. When the...

CVE-2019-11211

CVE-2019-11211 affects TIBCO Enterprise Runtime for R - Server Edition (versions 1.2.0 and below) and TIBCO Spotfire Analytics Platform for AWS Marketplace (versions 10.4.0 and 10.5.0). The vulnerability exists in the server component when running with a containerized TERR service on Linux, where...

CVE-2019-11210

CVE-2019-11210 affects the server component of TIBCO Enterprise Runtime for R - Server Edition and TIBCO Spotfire Analytics Platform for AWS Marketplace. Affected: TR for R Server Edition v1.2.0 and earlier; Spotfire Analytics Platform for AWS Marketplace v10.4.0 and v10.5.0. Description: an unau...

TIBCO Software Spotfire Analytics Platform for AWS Marketplace and TIBCO Software Enterprise Runtime for R-Server Edition Input Validation Error Vulnerabilities

TIBCO Software Spotfire Analytics Platform for AWS Marketplace and TIBCO Software Enterprise Runtime for R-Server Edition are products of TIBCO Software, Inc. TIBCO Software Spotfire Analytics Platform for AWS Marketplace is a platform for visualizing and analyzing data for the cloud application...

TIBCO Security Advisory: September 17, 2019 -TIBCO Enterprise Runtime for R Server -2019-11210

TIBCO Enterprise Runtime for R Server Exposes Remote Code Execution Original release date: September 17, 2019 Last revised: CVE-2019-11210 Source: TIBCOSoftware Inc. TIBCO Enterprise Runtime for R Server Exposes Remote Code Execution Original release date: September 17, 2019 Last revised: ---...

CVE-2019-11206

The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow a malicious user to undermine the integrity of comments and bookmarks. Affected releases are TIBCO Software...

CVE-2019-11206

The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow a malicious user to undermine the integrity of comments and bookmarks. Affected releases are TIBCO Software...

CVE-2019-11204

The web interface component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that might theoretically allow an authenticated user to access sensitive information needed by the Spotfire Statistics Services server. The sensitive information that might be affected...

CVE-2019-11205

The web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow reflected cross-site scripting XSS attacks. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics...

CVE-2019-11205

The web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow reflected cross-site scripting XSS attacks. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics...

CVE-2019-11204

The web interface component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that might theoretically allow an authenticated user to access sensitive information needed by the Spotfire Statistics Services server. The sensitive information that might be affected...

Cross site scripting

The web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow reflected cross-site scripting XSS attacks. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics...

Input validation

The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow a malicious user to undermine the integrity of comments and bookmarks. Affected releases are TIBCO Software...

Design/Logic Flaw

The web interface component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that might theoretically allow an authenticated user to access sensitive information needed by the Spotfire Statistics Services server. The sensitive information that might be affected...

CVE-2019-11204 TIBCO Spotfire Statistics Services Exposes Sensitive Files

The web interface component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that might theoretically allow an authenticated user to access sensitive information needed by the Spotfire Statistics Services server. The sensitive information that might be affected...

CVE-2019-11205

CVE-2019-11205 refers to reflected cross-site scripting (XSS) vulnerabilities in the web server component of TIBCO Spotfire Analytics Platform for AWS Marketplace and in TIBCO Spotfire Server. Affected releases include Spotfire Analytics Platform for AWS Marketplace: 7.14.0, 7.14.1, 10.0.0, 10.0....

CVE-2019-11205 TIBCO Spotfire Server Exposes Multiple Reflected Cross-Site Scripting Vulnerabilities

The web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow reflected cross-site scripting XSS attacks. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics...

CVE-2019-11204

The CVE-2019-11204 entry concerns the web interface component of TIBCO Spotfire Statistics Services. Affected releases are Spotfire Statistics Services up to 7.11.1 and 10.0.0. The vulnerability could allow an authenticated user to access sensitive information (e.g., database, JMX, LDAP, Windows ...

CVE-2019-11206 TIBCO Spotfire Server Vulnerabilities With Integrity of Comments and Bookmarks

The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow a malicious user to undermine the integrity of comments and bookmarks. Affected releases are TIBCO Software...

CVE-2019-11206

The CVE-2019-11206 entry affects TIBCO Spotfire products: Spotfire Analytics Platform for AWS Marketplace and Spotfire Server, where the Spotfire library component is vulnerable. The issue could allow a malicious user to undermine the integrity of comments and bookmarks. Affected releases include...