Tibco Spotfire Analytics Server vulnerabilities

4 vulnerabilities

Known vulnerabilities in Tibco Spotfire Analytics Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5CVE-2012-0690tibcospotfire_analytics_server+2
EPSS score
1.65%
TIBCO Spotfire Web Application, Web Player Application, Automation Services Application, and Analytics Client Application in Spotfire Analytics Server before 10.1.2; Server before 3.3.3; and Web Player, Automation Services, and Professional before 4.0.2 allow remote attackers to obtain sensitive information via a crafted URL.7.5CVE-2011-3134tibcospotfire_analytics_server+1
EPSS score
2.20%
Unspecified vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to modify data or obtain sensitive information via a crafted URL.4.3CVE-2011-3133tibcospotfire_analytics_server+1
EPSS score
1.70%
Session fixation vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to hijack web sessions via unspecified vectors.4.3CVE-2011-3132tibcospotfire_analytics_server+1
EPSS score
1.67%
Cross-site scripting (XSS) vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.