9680 matches found
Code injection
Unspecified vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to modify data or obtain sensitive information via a crafted URL...
CVE-2011-3132
Cross-site scripting XSS vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2011-3133
Session fixation vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to hijack web sessions via unspecified vectors...
CVE-2011-3134
Unspecified vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to modify data or obtain sensitive information via a crafted URL...
CVE-2011-3132
Summary: CVE-2011-3132 affects TIBCO Spotfire platforms. The vulnerability is an XSS flaw in Spotfire Server (versions 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, 3.3.x before 3.3.1) and Spotfire Analytics Server before 10.1.1, enabling remote attackers to inject arbitrary web scr...
CVE-2011-3133
The CVE affects TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1. It is a session-fixation vulnerability that allows remote attackers to hijack web sessions via unspecified vectors. Remediation pe...
CVE-2011-3134
CVE-2011-3134 affects TIBCO Spotfire Server 3.0.x (before 3.0.2), 3.1.x (before 3.1.2), 3.2.x (before 3.2.1), 3.3.x (before 3.3.1) and Spotfire Analytics Server before 10.1.1. The reported issue is a SQL injection vulnerability exploitable via a crafted URL that allows remote attackers to modify ...
PT-2011-4264
Name of the Vulnerable Software and Affected Versions TIBCO Spotfire Server versions 3.0.x through 3.0.1 TIBCO Spotfire Server versions 3.1.x through 3.1.1 TIBCO Spotfire Server versions 3.2.x through 3.2.0 TIBCO Spotfire Server versions 3.3.x through 3.3.0 TIBCO Spotfire Analytics Server version...
PT-2011-4262
Name of the Vulnerable Software and Affected Versions TIBCO Spotfire Server versions 3.0.x through 3.0.1 TIBCO Spotfire Server versions 3.1.x through 3.1.1 TIBCO Spotfire Server versions 3.2.x through 3.2.0 TIBCO Spotfire Server versions 3.3.x through 3.3.0 Spotfire Analytics Server versions prio...
PT-2011-4263
Name of the Vulnerable Software and Affected Versions TIBCO Spotfire Server versions 3.0.x through 3.0.1 TIBCO Spotfire Server versions 3.1.x through 3.1.1 TIBCO Spotfire Server versions 3.2.x through 3.2.0 TIBCO Spotfire Server versions 3.3.x through 3.3.0 Spotfire Analytics Server versions prio...
CVE-2011-3134: Undefined Security Weakness
Unspecified vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to modify data or obtain sensitive information via a crafted URL...
CVE-2011-3132: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2011-3133: Undefined Security Weakness
Session fixation vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to hijack web sessions via unspecified vectors...
Legal Threat Pushes Former HBGary Federal CEO Out Of DEFCON
Former HBGary Federal CEO Aaron Barr says he will withdraw from a planned appearance at the DEFCON conference in the face of threatened legal action over his plans to take part in a panel discussion there. Barr notified DEFCON organizers on Wednesday that he was withdrawing from the Aug. 6 panel...
CVE-2011-2241
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 10.1.3.4.1 and 11.1.1.3 allows remote attackers to affect availability via unknown vectors related to Analytics Server...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 10.1.3.4.1 and 11.1.1.3 allows remote attackers to affect availability via unknown vectors related to Analytics Server...
CVE-2011-2241
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 10.1.3.4.1 and 11.1.1.3 allows remote attackers to affect availability via unknown vectors related to Analytics Server...
CVE-2011-2241
Technical details about CVE-2011-2241 are not publicly available in the provided documents. Monitor for updates.
PT-2011-3705
Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition versions 10.1.3.4.1 and 11.1.1.3 Description The issue affects the availability of the system, allowing remote attackers to exploit it via unknown vectors related to the Analytics Server...
CVE-2011-2241: Undefined Security Weakness
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 10.1.3.4.1 and 11.1.1.3 allows remote attackers to affect availability via unknown vectors related to Analytics Server...