The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theoretically allows an attacker to perform a reflected cross-site scripting (XSS) attack. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: version 10.6.0 and TIBCO Spotfire Server: versions 7.11.7 and below, versions 7.12.0, 7.13.0, 7.14.0, 10.0.0, 10.0.1, 10.1.0, 10.2.0, 10.2.1, 10.3.0, 10.3.1, 10.3.2, 10.3.3, and 10.3.4, versions 10.4.0, 10.5.0, and 10.6.0.
AI analysis not yet available
Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.
No Fix Known
No patch has been released yet. Apply workarounds or mitigations where available.
| Vendor | Product | Versions | Fixed In |
|---|---|---|---|
| tibco | spotfire_analytics_platform_for_aws | - | - |
| tibco | spotfire_server | 7.11.7 | - |
| tibco | spotfire_server |
Published
CVE disclosed publicly
Last Modified
Most recent update
Indexed to CVEInsight
Added to this platform
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
18
Affected Products
4
References
tibco / spotfire_analytics_platform_for_aws
| - |
| - |
| tibco | spotfire_server | - | - |
| tibco | spotfire_server | - | - |
| tibco | spotfire_server | - | - |
| tibco | spotfire_server | - | - |
| tibco | spotfire_server | - | - |
| tibco | spotfire_server | - | - |
| tibco | spotfire_server | - | - |
| tibco | spotfire_server | - | - |
| tibco | spotfire_server | - | - |
| tibco | spotfire_server | - | - |
| tibco | spotfire_server | - | - |
| tibco | spotfire_server | - | - |
| tibco | spotfire_server | - | - |
| tibco | spotfire_server | - | - |
| tibco | spotfire_server | - | - |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Exploitability
Impact