high8.8
CVE-2019-11205
The web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities tha…
Impact
The web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow reflected cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: 7.14.0; 7.14.1; 10.0.0; 10.0.1; 10.1.0; 10.2.0, and TIBCO Spotfire Server: 7.14.0; 10.0.0; 10.0.1; 10.1.0; 10.2.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tibco | Spotfire Analytics Platform For Aws | Versions 7.14.0, 7.14.1, 10.0.0, 10.0.1, 10.1.0, 10.2.0 |
| Tibco | Spotfire Server | Versions 7.14.0, 10.0.0, 10.0.1, 10.1.0, 10.2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/108384
- http://www.tibco.com/services/support/advisories
- https://www.tibco.com/support/advisories/2019/05/tibco-security-advisory-may-14-2019-tibco-spotfire-server-2019-11205
- http://www.securityfocus.com/bid/108384
- http://www.tibco.com/services/support/advisories
- https://www.tibco.com/support/advisories/2019/05/tibco-security-advisory-may-14-2019-tibco-spotfire-server-2019-11205