Tibco

Spotfire Statistics Services

7 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2025-3115

Media report
  • EPSS 0.12%
  • Published 09.04.2025 18:15:50
  • Last modified 22.04.2025 16:46:51

Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions. Additionally, insufficient validation of filenames during file uploads can enable attackers to upload and execute m...

9.8

CVE-2023-29268

  • EPSS 1.14%
  • Published 26.04.2023 18:15:09
  • Last modified 30.01.2025 22:15:07

The Splus Server component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that allows an unauthenticated remote attacker to upload or modify arbitrary files within the web server directory on the affected system....

7.8

CVE-2021-23275

  • EPSS 0.03%
  • Published 29.06.2021 18:15:08
  • Last modified 21.11.2024 05:51:28

The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Spotfire Analytics Platform for AWS M...

7.8

CVE-2021-28830

  • EPSS 0.03%
  • Published 29.06.2021 18:15:08
  • Last modified 21.11.2024 06:00:17

The TIBCO Spotfire Server and TIBCO Enterprise Runtime for R components of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO ...

8.8

CVE-2019-11204

  • EPSS 0.47%
  • Published 14.05.2019 20:29:02
  • Last modified 21.11.2024 04:20:43

The web interface component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that might theoretically allow an authenticated user to access sensitive information needed by the Spotfire Statistics Services server. T...

9.8

CVE-2018-12410

  • EPSS 2.23%
  • Published 10.10.2018 20:29:00
  • Last modified 21.11.2024 03:45:10

The web server component of TIBCO Software Inc's Spotfire Statistics Services contains multiple vulnerabilities that may allow the remote execution of code. Without needing to authenticate, an attacker may be able to remotely execute code with the pe...

5

CVE-2013-2371

  • EPSS 0.45%
  • Published 15.03.2013 22:55:00
  • Last modified 11.04.2025 00:51:21

The Web API in the Statistics Server in TIBCO Spotfire Statistics Services 3.3.x before 3.3.1, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 allows remote attackers to obtain sensitive information via an unspecified HTTP request.