Product by Tibco Software Inc.
Tibco Spotfire Server
17 known vulnerabilities in Tibco Spotfire Server (Tibco Software Inc.), 0 of them actively exploited (CISA KEV).
Key figures
17
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2018-18814 | TIBCO Spotfire Authentication Vulnerability | 8.8 | |
| Critical | CVE-2020-9408 | TIBCO Spotfire Server Script Trust Problem Exposes Remote Code Execution Vulnerability | 9.9 | |
| High | CVE-2018-18813 | TIBCO Spotfire Reflected and Persistent Cross-Site Scripting Vulnerabilities | 8.8 | |
| High | CVE-2019-11205 | TIBCO Spotfire Server Exposes Multiple Reflected Cross-Site Scripting Vulnerabilities | 8.8 | |
| Medium | CVE-2019-11206 | TIBCO Spotfire Server Vulnerabilities With Integrity of Comments and Bookmarks | 4.3 | |
| High | CVE-2019-17336 | TIBCO Spotfire Web Player Potentially Exposes Credentials For Shared Data Sources | 7.7 | |
| Critical | CVE-2022-41558 | TIBCO Spotfire Stored Cross Site Scripting (XSS) Vulnerability | 9.0 | |
| High | CVE-2018-5436 | TIBCO Spotfire Server information disclosure vulnerabilities | 6.5 | |
| High | CVE-2019-17337 | TIBCO Spotfire Server Library Vulnerable to Reflected Cross-Site Scripting | 8.1 | |
| High | CVE-2021-43051 | TIBCO Spotfire Server API Authorization Vulnerability | 7.1 | |
| High | CVE-2021-23273 | TIBCO Spotfire Cross Site Scripting Vulnerability | 8.0 | |
| High | CVE-2020-9416 | TIBCO Spotfire Stored Cross Site Scripting Vulnerability | 8.2 | |
| High | CVE-2022-30579 | TIBCO Spotfire Server Blind SSRF vulnerability | 7.1 | |
| Medium | CVE-2019-17335 | TIBCO Spotfire Server Exposes User-Specific Cached Data To Others Users | 5.3 | |
| Medium | CVE-2017-5527 | TIBCO Spotfire injection vulnerabilities | 4.3 | |
| High | CVE-2021-28830 | TIBCO Spotfire Windows Platform Artifact Search vulnerability | 8.8 | |
| High | CVE-2021-23275 | TIBCO Spotfire Windows Platform Installation vulnerability | 8.8 |