Skip to content
OpenAdvisories
High · 8.8 CVE-2019-11205 EUVD-2019-2906GHSA-c4r2-c7vr-q2c9

TIBCO Spotfire Server Exposes Multiple Reflected Cross-Site Scripting Vulnerabilities

Published May 14, 2019 · Updated Sep 17, 2024 · Assigned by tibco

Vendor: TIBCO Software Product: TIBCO Spotfire Analytics Platform for AWS Marketplace Product: TIBCO Spotfire Server

Description

The web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow reflected cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: 7.14.0; 7.14.1; 10.0.0; 10.0.1; 10.1.0; 10.2.0, and TIBCO Spotfire Server: 7.14.0; 10.0.0; 10.0.1; 10.1.0; 10.2.0.

Affected products

VendorProductAffectedFixed
TIBCO Software TIBCO Spotfire Analytics Platform for AWS Marketplace 7.14.0, 7.14.1, 10.0.0, 10.0.1, 10.1.0, 10.2.0 —
TIBCO Software TIBCO Spotfire Server 7.14.0, 10.0.0, 10.0.1, 10.1.0, 10.2.0 —

References