6.4

CVE-2013-2373

EPSS 0.27%
Published 15.03.2013 22:55:00
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
Teams watchlist Login
Open Login

The Engine in TIBCO Spotfire Web Player 3.3.x before 3.3.3, 4.0.x before 4.0.3, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 does not properly implement access control, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors.

Affected products Warnungen 0 Metrics 2 CWE 0 References 6

Data is provided by the National Vulnerability Database (NVD)

Tibco ≫ Spotfire Web Player Version3.3

Tibco ≫ Spotfire Web Player Version3.3.2

Tibco ≫ Spotfire Web Player Version4.0

Tibco ≫ Spotfire Web Player Version4.0.1

Tibco ≫ Spotfire Web Player Version4.0.2

Tibco ≫ Spotfire Web Player Version4.5.0

Tibco ≫ Spotfire Web Player Version5.0.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.27%	0.479

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.4	10	4.9	AV:N/AC:L/Au:N/C:P/I:P/A:N

http://www.tibco.com/mk/advisory.jsp

Vendor Advisory

http://www.tibco.com/services/support/advisories/spotfire-advisory_20130313.jsp

Vendor Advisory

http://www.tibco.com/multimedia/spotfire-web-player-advisory-2013-03-12_tcm8-18480.txt

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2013-2373

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-2373

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-2373

EUVD