Known vulnerabilities in TIBCO Spotfire Server

Vendor: TIBCO
Software CPE: cpe:2.3:a:tibco:tibco_spotfire_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting TIBCO Spotfire Server TIBCO Spotfire Server is affected by 13 known vulnerabilities: 1 high, 4 medium, 8 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82925 - Insufficiently Protected Credentials
CVE-2023-26221
CWE-522 Medium
No
No
14.0.0 09.11.2023 SB2023110904
#VU82008 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-26220
CWE-79 Low
No
No
11.4.12, 12.0.6, 12.5.0 13.10.2023 SB2023101328
#VU67520 - Server-Side Request Forgery (SSRF)
CVE-2022-30579
CWE-918 Medium
No
No
12.0.1 21.09.2022 SB2022092101
#VU54474 - Improper Access Control
CVE-2021-23275
CWE-284 Low
No
No
10.3.13, 10.10.5, 11.4.0 30.06.2021 SB2021063028
#VU54472 - Improper Access Control
CVE-2021-28830
CWE-284 Low
No
No
10.3.13, 10.10.5, 11.4.0 30.06.2021 SB2021063028
#VU51381 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-23273
CWE-79 Low
No
No
10.3.12, 10.10.4, 11.2.0 10.03.2021 SB2021031016
#VU46748 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9416
CWE-79 Low
No
No
10.10.2 15.09.2020 SB2020091631
#VU26033 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-9408
CWE-94 High
No
No
7.11.10, 10.3.7, 10.8.1 12.03.2020 SB2020031215
#VU23656 - Exposure of sensitive information to an unauthorized actor
CVE-2019-17335
CWE-200 Medium
No
No
7.11.8, 10.3.5, 10.6.1 18.12.2019 SB2019121804
#VU23654 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-17337
CWE-79 Low
No
No
7.11.8, 10.3.5, 10.6.1 18.12.2019 SB2019121804
#VU23653 - Exposure of sensitive information to an unauthorized actor
CVE-2019-17336
CWE-200 Medium
No
No
7.11.8, 10.3.5, 10.6.1 18.12.2019 SB2019121804
#VU21215 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-11205
CWE-79 Low
No
No
10.2.1 19.09.2019 SB2019051412
#VU21214 - Cross-Site Request Forgery (CSRF)
CVE-2019-11206
CWE-352 Low
No
No
10.2.1 19.09.2019 SB2019051412