Product by TIBCO Software

TIBCO Spotfire Server

28 known vulnerabilities in TIBCO Spotfire Server (TIBCO Software), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in TIBCO Spotfire Server (TIBCO Software)

Critical	CVE-2018-18814	TIBCO Spotfire Authentication Vulnerability also in 3 other products	8.8	16.01.2019
Critical	CVE-2020-9408	TIBCO Spotfire Server Script Trust Problem Exposes Remote Code Execution Vulnerability also in 3 other products	9.9	11.03.2020
High	CVE-2018-18813	TIBCO Spotfire Reflected and Persistent Cross-Site Scripting Vulnerabilities also in 3 other products	8.8	16.01.2019
High	CVE-2019-11205	TIBCO Spotfire Server Exposes Multiple Reflected Cross-Site Scripting Vulnerabilities also in 3 other products	8.8	14.05.2019
Medium	CVE-2018-18812	TIBCO Spotfire Fails To Prevent Write Access to Spotfire Library also in 2 other products	6.5	16.01.2019
Medium	CVE-2019-11206	TIBCO Spotfire Server Vulnerabilities With Integrity of Comments and Bookmarks also in 3 other products	4.3	14.05.2019
High	CVE-2019-17336	TIBCO Spotfire Web Player Potentially Exposes Credentials For Shared Data Sources also in 3 other products	7.7	17.12.2019
Critical	CVE-2022-41558	TIBCO Spotfire Stored Cross Site Scripting (XSS) Vulnerability also in 7 other products	9.0	15.11.2022
High	CVE-2018-5436	TIBCO Spotfire Server information disclosure vulnerabilities also in 3 other products	6.5	27.06.2018
High	CVE-2019-17337	TIBCO Spotfire Server Library Vulnerable to Reflected Cross-Site Scripting also in 3 other products	8.1	17.12.2019
High	CVE-2021-43051	TIBCO Spotfire Server API Authorization Vulnerability also in 1 other product	7.1	14.12.2021
Not rated	CVE-2014-2544	TIBCO Automation Services: Code Execution also in 1 other product	—	09.04.2014
High	CVE-2021-23273	TIBCO Spotfire Cross Site Scripting Vulnerability also in 6 other products	8.0	09.03.2021
High	CVE-2020-9416	TIBCO Spotfire Stored Cross Site Scripting Vulnerability also in 7 other products	8.2	15.09.2020
High	CVE-2022-30579	TIBCO Spotfire Server Blind SSRF vulnerability also in 3 other products	7.1	20.09.2022
Not rated	CVE-2011-3134	TIBCO Spotfire Server: Information Disclosure also in 1 other product	—	02.09.2011
Not rated	CVE-2015-5713	TIBCO Spotfire Server: security vulnerability also in 1 other product	—	28.10.2015
Not rated	CVE-2014-5285	TIBCO Spotfire Server: Information Disclosure	—	04.09.2014
Medium	CVE-2019-17335	TIBCO Spotfire Server Exposes User-Specific Cached Data To Others Users also in 3 other products	5.3	17.12.2019
Medium	CVE-2017-5527	TIBCO Spotfire injection vulnerabilities also in 3 other products	4.3	09.05.2017
Not rated	CVE-2011-3133	TIBCO Spotfire Server: Session Fixation also in 1 other product	—	02.09.2011
Not rated	CVE-2015-5712	TIBCO Spotfire Server: security vulnerability also in 1 other product	—	28.10.2015
Not rated	CVE-2011-3132	TIBCO Spotfire Server: Cross-Site Scripting (XSS) also in 1 other product	—	02.09.2011
High	CVE-2021-28830	TIBCO Spotfire Windows Platform Artifact Search vulnerability also in 7 other products	8.8	29.06.2021
Not rated	CVE-2012-0690	TIBCO Spotfire Analytics Server: Information Disclosure also in 2 other products	—	13.03.2012

All vulnerabilities in search

All products by TIBCO Software

Key figures

Vulnerabilities