Known vulnerabilities in TIBCO Spotfire for AWS

Vendor: TIBCO
Software: TIBCO Spotfire for AWS
Software CPE: cpe:2.3:a:tibco:tibco_spotfire_for_aws:*:*:*:*:*:*:*:*
Website: https://www.tibco.com/
Total vulnerabilities: 15
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting TIBCO Spotfire for AWS TIBCO Spotfire for AWS is affected by 15 known vulnerabilities: 2 high, 6 medium, 7 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82925 - Insufficiently Protected Credentials
CVE-2023-26221		 CWE-522 Medium
No
No
 14.0.0 09.11.2023 SB2023110904
#VU67520 - Server-Side Request Forgery (SSRF)
CVE-2022-30579		 CWE-918 Medium
No
No
 12.0.1 21.09.2022 SB2022092101
#VU54474 - Improper Access Control
CVE-2021-23275		 CWE-284 Low
No
No
 11.4.0 30.06.2021 SB2021063028
#VU54472 - Improper Access Control
CVE-2021-28830		 CWE-284 Low
No
No
 11.4.0 30.06.2021 SB2021063028
#VU51381 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-23273		 CWE-79 Low
No
No
 11.2.0 10.03.2021 SB2021031016
#VU46748 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9416		 CWE-79 Low
No
No
 10.10.2 15.09.2020 SB2020091631
#VU26033 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-9408		 CWE-94 High
No
No
 10.8.1 12.03.2020 SB2020031215
#VU23656 - Exposure of sensitive information to an unauthorized actor
CVE-2019-17335		 CWE-200 Medium
No
No
 10.6.1 18.12.2019 SB2019121804
#VU23655 - Improper input validation
CVE-2019-17334		 CWE-20 Medium
No
No
 10.6.1 18.12.2019 SB2019121804
#VU23654 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-17337		 CWE-79 Low
No
No
 10.6.1 18.12.2019 SB2019121804
#VU23653 - Exposure of sensitive information to an unauthorized actor
CVE-2019-17336		 CWE-200 Medium
No
No
 10.6.1 18.12.2019 SB2019121804
#VU21215 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-11205		 CWE-79 Low
No
No
 10.3.0 19.09.2019 SB2019051412
#VU21214 - Cross-Site Request Forgery (CSRF)
CVE-2019-11206		 CWE-352 Low
No
No
 10.3.0 19.09.2019 SB2019051412
#VU21212 - Improper input validation
CVE-2019-11210		 CWE-20 High
No
No
 10.5.1 19.09.2019 SB2019091911
#VU21210 - Improper input validation
CVE-2019-11211		 CWE-20 Medium
No
No
 10.5.1 19.09.2019 SB2019091911