tibco spotfire desktop
ProduktUScpe:2.3:a:tibco:spotfire_desktop:*:*:*:*:*:*:*:*
Ein im Bedrohungsgraphen erfasstes Produkt; die Schwachstellen unten betreffen es bekanntermaßen.
0
KEV-gelistet
0
öffentlicher Exploit
0
EPSS ≥ 10%
nach Schweregrad
3critical3high4medium0low
aktualisiert 2026-10-30
01
Schwachstellen (10)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||||
|---|---|---|---|---|---|---|
| CVE-2015-4554US | high7.5 | — | ||||
Multiple unspecified vulnerabilities in TIBCO Spotfire Client and Spotfire Web Player Client in Spotfire Analyst before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x bef… | ||||||
| CVE-2018-5435US | critical9.8 | — | ||||
The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TI… | ||||||
| CVE-2017-3181US | critical9.8 | — | ||||
Multiple TIBCO Products are prone to multiple unspecified SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query. E… | ||||||
| CVE-2019-17334US | high8.0OT erhöht | — | ||||
The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire D… | ||||||
| CVE-2018-5437US | high8.8 | — | ||||
The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TI… | ||||||
| CVE-2025-3115US | critical9.8 | — | ||||
Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions.
Additionally, insufficient validation of file… | ||||||
| CVE-2021-23273US | medium5.4 | — | ||||
The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, and TIBCO Spotfire Ser… | ||||||
| CVE-2017-3180US | medium5.4 | — | ||||
Multiple TIBCO Products are prone to multiple unspecified cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage t… | ||||||
| CVE-2020-9416US | medium5.4 | — | ||||
The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, and TIBCO Spotfire Ser… | ||||||
| CVE-2022-41558US | medium5.4 | — | ||||
The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace,… | ||||||
02
Schwächen (6)
Die Schwächeklassen (CWEs), die die meisten dieser CVEs teilen.
- CWE-79Improper Neutralization of Input During Web Page Generation4 CVEs
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
- CWE-94Improper Control of Generation of Code2 CVEs
- CWE-20Improper Input Validation1 CVEs
- CWE-276Incorrect Default Permissions1 CVEs
- CWE-89Improper Neutralization of Special Elements used in an SQL Command1 CVEs
03
Datenquellen (1)
Welche Quellen diesen Datensatz belegen und wann.
- USNVD / CVE10 CVEs
scry
Produkte tragen bekannte Schwachstellen, sobald sie im Internet exponiert sind. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan