Skip to content
OpenAdvisories
Medium · 4.3 CVE-2017-5527 EUVD-2017-14630GHSA-cfr5-rfj7-vjc4

TIBCO Spotfire injection vulnerabilities

Published May 9, 2017 · Updated Sep 16, 2024 · Assigned by tibco

Description

TIBCO Spotfire Server 7.0.X before 7.0.2, 7.5.x before 7.5.1, 7.6.x before 7.6.1, 7.7.x before 7.7.1, and 7.8.x before 7.8.1 and Spotfire Analytics Platform for AWS Marketplace 7.8.0 and earlier contain multiple vulnerabilities which may allow authorized users to perform SQL injection attacks.

Affected products

VendorProductAffectedFixed
TIBCO Software TIBCO Spotfire Server 7.0.0, 7.0.1, 7.5.0, 7.6.0, 7.7.0, 7.8.0 —
TIBCO Software TIBCO Spotfire Analytics Platform for AWS Marketplace 7.8.0 —

References