Tibco Spotfire Desktop Language Packs vulnerabilities

6 known vulnerabilities affecting tibco/spotfire_desktop_language_packs.

Total CVEs
6
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL2HIGH3MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2019-17334HIGHCVSS 8.0≤ 7.11.12019-12-17
CVE-2019-17334 [HIGH] CWE-276 CVE-2019-17334: The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analyti The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfire Desktop Language Packs contains a vulnerability that theoretically allows an attacker with permission to write DXP files to the Spotfire library t
nvd
CVE-2017-3181CRITICALCVSS 9.8v7.6.0v7.7.02018-07-24
CVE-2017-3181 [CRITICAL] CWE-89 CVE-2017-3181: Multiple TIBCO Products are prone to multiple unspecified SQL-injection vulnerabilities because it f Multiple TIBCO Products are prone to multiple unspecified SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. The follo
cvelistv5nvd
CVE-2017-3180MEDIUMCVSS 5.4≤ 7.0.1v7.5.0+3 more2018-07-24
CVE-2017-3180 [MEDIUM] CWE-20 CVE-2017-3180: Multiple TIBCO Products are prone to multiple unspecified cross-site scripting vulnerabilities becau Multiple TIBCO Products are prone to multiple unspecified cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based aut
cvelistv5nvd
CVE-2018-5435CRITICALCVSS 9.8≤ 7.8.0v7.9.0+4 more2018-06-27
CVE-2018-5435 [CRITICAL] CVE-2018-5435: The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s T The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfire Desktop Language Packs contain multiple vulnerabilities that may allow for remote code execution. Affected
nvd
CVE-2018-5437HIGHCVSS 8.8≤ 7.8.0v7.9.0+4 more2018-06-27
CVE-2018-5437 [HIGH] CVE-2018-5437: The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s T The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfire Desktop Language Packs contain multiple vulnerabilities that may allow for unauthorized information disclosure.
nvd
CVE-2015-4554HIGHCVSS 7.5v7.0.02015-07-21
CVE-2015-4554 [HIGH] CVE-2015-4554: Multiple unspecified vulnerabilities in TIBCO Spotfire Client and Spotfire Web Player Client in Spot Multiple unspecified vulnerabilities in TIBCO Spotfire Client and Spotfire Web Player Client in Spotfire Analyst before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; Spotfire Analytics Platform for AWS 6.5 and 7.0.x before 7.0.1; Spotfire Automation Services before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; S
nvd