7.5

CVE-2014-2544

Unspecified vulnerability in Spotfire Web Player Engine, Spotfire Desktop, and Spotfire Server Authentication Module in TIBCO Spotfire Server 3.3.x before 3.3.4, 4.5.x before 4.5.1, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.2; Spotfire Professional 4.0.x before 4.0.4, 4.5.x before 4.5.2, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.1; Spotfire Web Player 4.0.x before 4.0.4, 4.5.x before 4.5.2, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.1; Spotfire Automation Services 4.0.x before 4.0.4, 4.5.x before 4.5.2, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.1; Spotfire Deployment Kit 4.0.x before 4.0.4, 4.5.x before 4.5.2, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.1; Spotfire Desktop 6.x before 6.0.1; and Spotfire Analyst 6.x before 6.0.1 allows remote attackers to execute arbitrary code via unknown vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tibco ≫ Web Player Version <= 4.0.3
Tibco ≫ Web Player Version 4.5.0
Tibco ≫ Web Player Version 4.5.1
Tibco ≫ Web Player Version 5.0.0
Tibco ≫ Web Player Version 5.0.1
Tibco ≫ Web Player Version 5.5.0
Tibco ≫ Web Player Version 6.0.0
Tibco ≫ Automation Services Version <= 4.0.3
Tibco ≫ Automation Services Version 4.5.0
Tibco ≫ Automation Services Version 4.5.1
Tibco ≫ Automation Services Version 5.0.0
Tibco ≫ Automation Services Version 5.0.1
Tibco ≫ Automation Services Version 5.5.0
Tibco ≫ Automation Services Version 6.0.0
Tibco ≫ Spotfire Server Version <= 3.3.3
Tibco ≫ Spotfire Server Version 4.5.0
Tibco ≫ Spotfire Server Version 5.0.0
Tibco ≫ Spotfire Server Version 5.0.1
Tibco ≫ Spotfire Server Version 5.5.0
Tibco ≫ Spotfire Server Version 6.0.0
Tibco ≫ Spotfire Server Version 6.0.1
Tibco ≫ Spotfire Professional Version <= 4.0.3
Tibco ≫ Spotfire Professional Version 4.5.0
Tibco ≫ Spotfire Professional Version 4.5.1
Tibco ≫ Spotfire Professional Version 5.0.0
Tibco ≫ Spotfire Professional Version 5.0.1
Tibco ≫ Spotfire Professional Version 5.5.0
Tibco ≫ Spotfire Professional Version 6.0.0
Tibco ≫ Analyst Version <= 6.0.0
Tibco ≫ Desktop Version <= 6.0.0
Tibco ≫ Deployment Kit Version <= 4.0.3
Tibco ≫ Deployment Kit Version 4.5.0
Tibco ≫ Deployment Kit Version 4.5.1
Tibco ≫ Deployment Kit Version 5.0.0
Tibco ≫ Deployment Kit Version 5.0.1
Tibco ≫ Deployment Kit Version 5.5.0
Tibco ≫ Deployment Kit Version 6.0.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.06% 0.86
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.tibco.com/mk/advisory.jsp
Vendor Advisory
http://www.tibco.com/multimedia/spotfire_advisory_20140409_tcm8-20764.txt
Vendor Advisory