medium4.3
CVE-2011-3132
Cross-site scripting (XSS) vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotf…
Impact
Cross-site scripting (XSS) vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tibco | Spotfire Analytics Server | through 10.0.1 Version 10.0.0 |
| Tibco | Spotfire Server | Versions 3.0.0, 3.0.1, 3.1.0, 3.1.1, 3.2.0, 3.3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/45864
- http://www.securitytracker.com/id?1025999
- http://www.tibco.com/multimedia/spotfire_advisory_20110831_tcm8-14230.txt
- http://www.tibco.com/services/support/advisories/default.jsp
- http://secunia.com/advisories/45864
- http://www.securitytracker.com/id?1025999
- http://www.tibco.com/multimedia/spotfire_advisory_20110831_tcm8-14230.txt
- http://www.tibco.com/services/support/advisories/default.jsp