NetSight
medium4.0

CVE-2014-7195

Spotfire Web Player Engine in TIBCO Spotfire Web Player 6.0.x before 6.0.2 and 6.5.x before 6.5.2, Spotfire Deployment Kit 6.0.x before 6.0.2 and 6.5.x before …

Impact

Spotfire Web Player Engine in TIBCO Spotfire Web Player 6.0.x before 6.0.2 and 6.5.x before 6.5.2, Spotfire Deployment Kit 6.0.x before 6.0.2 and 6.5.x before 6.5.2, and Silver Fabric Enabler for Spotfire Web Player before 1.6.1 allows remote authenticated users to obtain sensitive information via unspecified vectors.

Affected products

VendorProductAffected versions
TibcoSilver Fabric Enabler
through 1.6.0
TibcoSpotfire Deployment Kit
Versions 6.0.0, 6.0.1, 6.5.0, 6.5.1
TibcoSpotfire Web Player
Versions 6.0.0, 6.0.1, 6.5.0, 6.5.1

Weakness classification

References