CVE-2011-3132 — Cross-site Scripting in Spotfire Analytics Server

CWE-79 — Cross-site Scripting2 documents2 sources
Severity
4.3MEDIUMNVD
EPSS
0.3%
top 48.80%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Tibco Spotfire Analytics ServerTibco Spotfire Server
Timeline
PublishedSep 2
Latest updateMay 17

Description

Cross-site scripting (XSS) vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

▶NVDtibco/spotfire_server6 versions+5

🔴Vulnerability Details

1
GHSA
GHSA-qv96-623h-jhjh: Cross-site scripting (XSS) vulnerability in TIBCO Spotfire Server 3↗2022-05-17
▶