NetSight
IP …
medium5.0

CVE-2012-0690

TIBCO Spotfire Web Application, Web Player Application, Automation Services Application, and Analytics Client Application in Spotfire Analytics Server before 1…

Impact

TIBCO Spotfire Web Application, Web Player Application, Automation Services Application, and Analytics Client Application in Spotfire Analytics Server before 10.1.2; Server before 3.3.3; and Web Player, Automation Services, and Professional before 4.0.2 allow remote attackers to obtain sensitive information via a crafted URL.

Affected products

VendorProductAffected versions
TibcoSpotfire Analytics Server
Versions 10.0.0, 10.0.1
TibcoSpotfire Server
Versions 3.0.0, 3.0.1, 3.1.0, 3.1.1, 3.2.0, 3.3.0
TibcoWeb Player Automation Services
All versions
TibcoSpotfire Professional
through 4.0.1

Weakness classification

CWE-200

References