Tibco

Spotfire Web Player

5 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2017-3180

  • EPSS 0.34%
  • Published 24.07.2018 15:29:00
  • Last modified 21.11.2024 03:24:58

Multiple TIBCO Products are prone to multiple unspecified cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsu...

7.5

CVE-2015-4554

  • EPSS 1.5%
  • Published 21.07.2015 19:59:03
  • Last modified 12.04.2025 10:46:40

Multiple unspecified vulnerabilities in TIBCO Spotfire Client and Spotfire Web Player Client in Spotfire Analyst before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; Spotfire Analytics Platform for AWS 6.5 and 7.0.x before 7....

4

CVE-2014-7195

  • EPSS 0.14%
  • Published 21.11.2014 02:59:04
  • Last modified 12.04.2025 10:46:40

Spotfire Web Player Engine in TIBCO Spotfire Web Player 6.0.x before 6.0.2 and 6.5.x before 6.5.2, Spotfire Deployment Kit 6.0.x before 6.0.2 and 6.5.x before 6.5.2, and Silver Fabric Enabler for Spotfire Web Player before 1.6.1 allows remote authent...

4.3

CVE-2013-2372

  • EPSS 0.32%
  • Published 15.03.2013 22:55:00
  • Last modified 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in the Engine in TIBCO Spotfire Web Player 3.3.x before 3.3.3, 4.0.x before 4.0.3, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vect...

6.4

CVE-2013-2373

  • EPSS 0.27%
  • Published 15.03.2013 22:55:00
  • Last modified 11.04.2025 00:51:21

The Engine in TIBCO Spotfire Web Player 3.3.x before 3.3.3, 4.0.x before 4.0.3, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 does not properly implement access control, which allows remote attackers to obtain sensitive information or modify data via un...