CVE-2014-2544
Unspecified vulnerability in Spotfire Web Player Engine, Spotfire Desktop, and Spotfire Server Authentication Module in TIBCO Spotfire Server 3.3.x before 3.3.…
Impact
Unspecified vulnerability in Spotfire Web Player Engine, Spotfire Desktop, and Spotfire Server Authentication Module in TIBCO Spotfire Server 3.3.x before 3.3.4, 4.5.x before 4.5.1, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.2; Spotfire Professional 4.0.x before 4.0.4, 4.5.x before 4.5.2, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.1; Spotfire Web Player 4.0.x before 4.0.4, 4.5.x before 4.5.2, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.1; Spotfire Automation Services 4.0.x before 4.0.4, 4.5.x before 4.5.2, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.1; Spotfire Deployment Kit 4.0.x before 4.0.4, 4.5.x before 4.5.2, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.1; Spotfire Desktop 6.x before 6.0.1; and Spotfire Analyst 6.x before 6.0.1 allows remote attackers to execute arbitrary code via unknown vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tibco | Web Player | through 4.0.3 Versions 4.5.0, 4.5.1, 5.0.0, 5.0.1, 5.5.0 |
| Tibco | Automation Services | through 4.0.3 Versions 4.5.0, 4.5.1, 5.0.0, 5.0.1, 5.5.0 |
| Tibco | Spotfire Server | through 3.3.3 Versions 4.5.0, 5.0.0, 5.0.1, 5.5.0, 6.0.0 |
| Tibco | Spotfire Professional | through 4.0.3 Versions 4.5.0, 4.5.1, 5.0.0, 5.0.1, 5.5.0 |
| Tibco | Analyst | through 6.0.0 |
| Tibco | Desktop | through 6.0.0 |
| Tibco | Deployment Kit | through 4.0.3 Versions 4.5.0, 4.5.1, 5.0.0, 5.0.1, 5.5.0 |