CVE-2022-30579: fallo de gravedad alta en TIBCO Spotfire Server
TIBCO Spotfire Server Blind SSRF vulnerability
Publicada el · Actualizada el
Seguir esta CVE+ Monitorear TIBCO Spotfire Analytics Platform for AWS Marketplace+ Monitorear TIBCO Spotfire Server
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.1epss 0.6%
The Web Player component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows a low privileged attacker with network access to execute blind Server Side Request Forgery (SSRF) on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: version 12.0.0 and TIBCO Spotfire Server: version 12.0.0.
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L
Productos afectados
TIBCO Software Inc. · TIBCO Spotfire Analytics Platform for AWS MarketplaceTIBCO Software Inc. · TIBCO Spotfire ServerCVEs relacionadas — TIBCO Spotfire Server
En el mismo producto, de las más peligrosas a las menos.
CVE-2019-11211CRITICALTIBCO Enterprise Runtime for R Server Running On Linux With Containerized TERR Service Vulnerable To Remote Code ExecutionEPSS 3.7%CVE-2019-11210CRITICALTIBCO Enterprise Runtime for R Server Exposes Remote Code ExecutionEPSS 3.7%CVE-2018-5435CRITICALTIBCO Spotfire Product Family Remote Code Execution VulnerabilityEPSS 3.2%CVE-2018-18814HIGHTIBCO Spotfire Authentication VulnerabilityEPSS 3.1%CVE-2019-11206MEDIUMTIBCO Spotfire Server Vulnerabilities With Integrity of Comments and BookmarksEPSS 1.6%CVE-2018-18813HIGHTIBCO Spotfire Reflected and Persistent Cross-Site Scripting VulnerabilitiesEPSS 1.5%