CVE-2018-5436

CVE-2018-5436 affects TIBCO Spotfire Platform for AWS Marketplace (up to 7.12.0) and TIBCO Spotfire Server (up to 7.8.1; 7.9.0; 7.10.0; 7.11.0; 7.12.0). The vulnerabilities may disclose information, including user and data source credentials. CVSSv3 base score 8.8 (HIGH) with NETWORK attack vecto...

TIBCO Spotfire Server and Spotfire Analytics Platform for AWS Marketplace SQL Injection Vulnerabilities

TIBCO Spotfire Server and Spotfire Analytics Platform for AWS Marketplace are both products of the US-based TIBCO Software. The former is a set of TIBCO Spotfire data analysis and mining tools based on TIBCO Spotfire for enterprises to provide integration, operation and management of the platform...

CVE-2017-5527

TIBCO Spotfire Server 7.0.X before 7.0.2, 7.5.x before 7.5.1, 7.6.x before 7.6.1, 7.7.x before 7.7.1, and 7.8.x before 7.8.1 and Spotfire Analytics Platform for AWS Marketplace 7.8.0 and earlier contain multiple vulnerabilities which may allow authorized users to perform SQL injection attacks...

CVE-2017-5527

TIBCO Spotfire Server 7.0.X before 7.0.2, 7.5.x before 7.5.1, 7.6.x before 7.6.1, 7.7.x before 7.7.1, and 7.8.x before 7.8.1 and Spotfire Analytics Platform for AWS Marketplace 7.8.0 and earlier contain multiple vulnerabilities which may allow authorized users to perform SQL injection attacks...

Sql injection

TIBCO Spotfire Server 7.0.X before 7.0.2, 7.5.x before 7.5.1, 7.6.x before 7.6.1, 7.7.x before 7.7.1, and 7.8.x before 7.8.1 and Spotfire Analytics Platform for AWS Marketplace 7.8.0 and earlier contain multiple vulnerabilities which may allow authorized users to perform SQL injection attacks...

CVE-2017-5527

The provided data confirms a SQL injection issue affecting TIBCO Spotfire products. Affected: Spotfire Server versions 7.0.x before 7.0.2; 7.5.x before 7.5.1; 7.6.x before 7.6.1; 7.7.x before 7.7.1; 7.8.x before 7.8.1; Spotfire Analytics Platform for AWS Marketplace 7.8.0 and earlier. Description...

CVE-2017-5527 TIBCO Spotfire injection vulnerabilities

TIBCO Spotfire Server 7.0.X before 7.0.2, 7.5.x before 7.5.1, 7.6.x before 7.6.1, 7.7.x before 7.7.1, and 7.8.x before 7.8.1 and Spotfire Analytics Platform for AWS Marketplace 7.8.0 and earlier contain multiple vulnerabilities which may allow authorized users to perform SQL injection attacks...

Cross-Site Scripting Vulnerability in Multiple TIBCO Products

TIBCO Spotfire Automation Services are products of TIBCO Software, Inc. Spotfire Automation Services is a suite of tools for running automated analyses; Spotfire Professional is a comprehensive analytics platform for all aspects of business analysts and users. Spotfire Professional is a...

Multiple TIBCO Product SQL Injection Vulnerabilities

TIBCO Spotfire Server and others are products of TIBCO Software, Inc. Multiple TIBCO products are vulnerable to a SQL injection vulnerability that originates from a program's failure to properly validate user-supplied input before using it in a SQL query. The vulnerability allows an attacker to...

TIBCO Spotfire Server Information Disclosure Vulnerability (CNVD-2015-07300)

TIBCO Spotfire Analyst Platform for AWS Marketplace is a suite of data visualization and analytics platforms for AWS, the cloud application store, from TIBCO Software, USA. Versions 5.5.x prior to 5.5.4, 6.0.x prior to 6.0.5, 6.5.x prior to 6.5.4, 7.0.x prior to 7.0.1 of TIBCO Spotfire Server,...

TIBCO Spotfire Server Information Disclosure Vulnerability (CNVD-2015-07301)

TIBCO Spotfire Server is based on TIBCO Spotfire data analysis and mining tools of TIBCO Software Inc. of the United States to provide integration, operation and management of the platform for the enterprise. TIBCO Spotfire Server versions 5.5.x before 5.5.4, 6.0.x before 6.0.5, 6.5.x before 6.5....

CVE-2015-5713

Spotfire Parsing Library and Spotfire Security Filter in TIBCO Spotfire Server 5.5.x before 5.5.4, 6.0.x before 6.0.5, 6.5.x before 6.5.4, and 7.0.x before 7.0.1 and Spotfire Analytics Platform before 7.0.2 for AWS Marketplace allow remote attackers to obtain sensitive log information by visiting...

CVE-2015-5712

Spotfire Parsing Library and Spotfire Security Filter in TIBCO Spotfire Server 5.5.x before 5.5.4, 6.0.x before 6.0.5, 6.5.x before 6.5.4, and 7.0.x before 7.0.1 and Spotfire Analytics Platform before 7.0.2 for AWS Marketplace allow remote authenticated users to obtain sensitive system informatio...

Code injection

Spotfire Parsing Library and Spotfire Security Filter in TIBCO Spotfire Server 5.5.x before 5.5.4, 6.0.x before 6.0.5, 6.5.x before 6.5.4, and 7.0.x before 7.0.1 and Spotfire Analytics Platform before 7.0.2 for AWS Marketplace allow remote attackers to obtain sensitive log information by visiting...

Code injection

Spotfire Parsing Library and Spotfire Security Filter in TIBCO Spotfire Server 5.5.x before 5.5.4, 6.0.x before 6.0.5, 6.5.x before 6.5.4, and 7.0.x before 7.0.1 and Spotfire Analytics Platform before 7.0.2 for AWS Marketplace allow remote authenticated users to obtain sensitive system informatio...

CVE-2015-5712

CVE-2015-5712 affects TIBCO Spotfire Server and Spotfire Analytics Platform for AWS Marketplace. It allows remote authenticated users to obtain sensitive system information by visiting an unspecified URL. Affected versions: Spotfire Server 5.5.x before 5.5.4; 6.0.x before 6.0.5; 6.5.x before 6.5....

CVE-2015-5712

Spotfire Parsing Library and Spotfire Security Filter in TIBCO Spotfire Server 5.5.x before 5.5.4, 6.0.x before 6.0.5, 6.5.x before 6.5.4, and 7.0.x before 7.0.1 and Spotfire Analytics Platform before 7.0.2 for AWS Marketplace allow remote authenticated users to obtain sensitive system informatio...

CVE-2015-5713

CVE-2015-5713 affects Spotfire Server and Spotfire Analytics Platform prior to specific builds: 5.5.x before 5.5.4, 6.0.x before 6.0.5, 6.5.x before 6.5.4, and 7.0.x before 7.0.1 (Analytics Platform AWS Marketplace 7.0.2). The vulnerability stems from the Spotfire Parsing Library and Spotfire Sec...

CVE-2015-5713

Spotfire Parsing Library and Spotfire Security Filter in TIBCO Spotfire Server 5.5.x before 5.5.4, 6.0.x before 6.0.5, 6.5.x before 6.5.4, and 7.0.x before 7.0.1 and Spotfire Analytics Platform before 7.0.2 for AWS Marketplace allow remote attackers to obtain sensitive log information by visiting...

Multiple Unspecified Vulnerabilities in TIBCO Spotfire Analyst

TIBCO Spotfire Analyst is a suite of data analysis and mining platforms from TIBCO Software, USA. Multiple unspecified vulnerabilities in TIBCO Spotfire Analyst 5.5.2, prior version 6.0.3, prior 6.0.x version 6.5.3,7.0.x prior 7.0.1; and prior 6.5.x version versions allow remote attackers to...