Spotfire Analytics Server Security Vulnerabilities and Issues — Spotfire Analytics Server CVE List

Lucene search

TibcoSpotfire Analytics Server

2 matches found

CVE•added 2011/09/02 4:55 p.m.•38 views

CVE-2011-3132

Cross-site scripting (XSS) vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3CVSS5.8AI score0.00277EPSS

CVE•added 2011/09/02 4:55 p.m.•34 views

CVE-2011-3133

Session fixation vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to hijack web sessions via unspecified vectors.

4.3CVSS6.9AI score0.00377EPSS