CVE-2017-5527: fallo de gravedad media en TIBCO Spotfire Server
TIBCO Spotfire injection vulnerabilities
Publicada el · Actualizada el
Seguir esta CVE+ Monitorear TIBCO Spotfire Analytics Platform for AWS Marketplace+ Monitorear TIBCO Spotfire Server
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 4.3epss 0.9%
TIBCO Spotfire Server 7.0.X before 7.0.2, 7.5.x before 7.5.1, 7.6.x before 7.6.1, 7.7.x before 7.7.1, and 7.8.x before 7.8.1 and Spotfire Analytics Platform for AWS Marketplace 7.8.0 and earlier contain multiple vulnerabilities which may allow authorized users to perform SQL injection attacks.
CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N
Productos afectados
TIBCO Software Inc. · TIBCO Spotfire Analytics Platform for AWS MarketplaceTIBCO Software Inc. · TIBCO Spotfire ServerCVEs relacionadas — TIBCO Spotfire Server
En el mismo producto, de las más peligrosas a las menos.
CVE-2019-11211CRITICALTIBCO Enterprise Runtime for R Server Running On Linux With Containerized TERR Service Vulnerable To Remote Code ExecutionEPSS 3.7%CVE-2019-11210CRITICALTIBCO Enterprise Runtime for R Server Exposes Remote Code ExecutionEPSS 3.7%CVE-2018-5435CRITICALTIBCO Spotfire Product Family Remote Code Execution VulnerabilityEPSS 3.2%CVE-2018-18814HIGHTIBCO Spotfire Authentication VulnerabilityEPSS 3.1%CVE-2019-11206MEDIUMTIBCO Spotfire Server Vulnerabilities With Integrity of Comments and BookmarksEPSS 1.6%CVE-2018-18813HIGHTIBCO Spotfire Reflected and Persistent Cross-Site Scripting VulnerabilitiesEPSS 1.5%