Skip to content
OpenAdvisories
High · 8.8 CVE-2018-18813 EUVD-2018-10529GHSA-hfh6-wr2c-5p4w

TIBCO Spotfire Reflected and Persistent Cross-Site Scripting Vulnerabilities

Published Jan 16, 2019 · Updated Sep 17, 2024 · Assigned by tibco

Description

The Spotfire web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains multiple vulnerabilities that may allow persistent and reflected cross-site scripting attacks. Affected releases are TIBCO Software Inc. TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 10.0.0, and TIBCO Spotfire Server: versions up to and including 7.10.1; 7.11.0; 7.11.1; 7.12.0; 7.13.0; 7.14.0; 10.0.0.

Affected products

VendorProductAffectedFixed
TIBCO Software TIBCO Spotfire Analytics Platform for AWS Marketplace unspecified – ≤ 10.0.0 —
TIBCO Software TIBCO Spotfire Server unspecified – ≤ 7.10.1, 7.11.0, 7.11.1, 7.12.0, 7.13.0, 7.14.0, 10.0.0 —

References