CVE-2017-3180

CVE-2017-3180 involves multiple TIBCO Spotfire components susceptible to unspecified cross-site scripting due to improper sanitization of user input. Affected products include TIBCO Spotfire Analyst, Desktop, Deployment Kit, Web Player, Automation Services, Connectors, and related platforms acros...

CVE-2015-4554

Technical details about CVE-2015-4554 are not publicly available in the provided connected documents; monitor for updates from vendors and databases.

CVE-2014-7195

CVE-2014-7195 affects Spotfire Web Player Engine in TIBCO Spotfire Web Player 6.0.x (before 6.0.2) and 6.5.x (before 6.5.2); Spotfire Deployment Kit 6.0.x (before 6.0.2) and 6.5.x (before 6.5.2); and Silver Fabric Enabler for Spotfire Web Player (before 1.6.1). The vulnerability allows remote aut...

CVE-2013-2373

The CVE-2013-2373 issue affects TIBCO Spotfire Web Player: 3.3.x before 3.3.3, 4.0.x before 4.0.3, 4.5.x before 4.5.1, and 5.0.x before 5.0.1. The root cause is improper access control in the Engine, allowing remote attackers to obtain sensitive information or modify data via unspecified vectors....

CVE-2013-2372

CVE-2013-2372 affects TIBCO Spotfire Web Player Engine across multiple lines: 3.3.x before 3.3.3; 4.0.x before 4.0.3; 4.5.x before 4.5.1; and 5.0.x before 5.0.1. It is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified ve...