tibco spotfire analytics platform for aws

Name: tibco spotfire analytics platform for aws
Brand: tibco

productUS

cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

4critical5high11medium0low

updated 2026-10-28

vulnerabilities (20)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-11211US	critical9.9	3.72% (90th)	—	no fix	2019-09-18	2 versions
CVE-2019-11210US	critical10.0	3.66% (90th)	—	no fix	2019-09-18	2 versions
CVE-2015-4554US	high7.5	3.49% (89th)	—	no fix	2015-07-21	2 versions
CVE-2018-5435US	critical9.8	3.24% (88th)	—	no fix	2018-06-27	≤ 7.12.0
CVE-2018-18814US	critical9.8	3.10% (88th)	—	no fix	2019-01-16	≤ 10.0.0
CVE-2015-5713US	medium5.0	2.13% (82nd)	—	no fix	2015-10-28	≤ 7.0.1
CVE-2015-5712US	medium4.0	1.69% (77th)	—	no fix	2015-10-28	≤ 7.0.1
CVE-2019-11206US	medium5.3	1.61% (76th)	—	no fix	2019-05-14	≤ 10.2.0
CVE-2018-18813US	medium6.1	1.48% (74th)	—	no fix	2019-01-16	≤ 10.0.0
CVE-2020-9408US	high8.8OT elevated	1.27% (70th)	—	no fix	2020-03-11	≤ 10.8.0
CVE-2019-11205US	medium6.1	1.27% (70th)	—	no fix	2019-05-14	6 versions
CVE-2018-18812US	medium5.3	1.16% (67th)	—	no fix	2019-01-16	≤ 10.0.0
CVE-2018-5436US	high8.8	1.01% (63rd)	—	no fix	2018-06-27	≤ 7.12.0
CVE-2019-17334US	high8.0OT elevated	0.96% (62nd)	—	no fix	2019-12-17	= 10.6.0
CVE-2018-5437US	high8.8	0.93% (61st)	—	no fix	2018-06-27	≤ 7.12.0
CVE-2017-5527US	medium6.5	0.92% (60th)	—	no fix	2017-05-09	≤ 7.8.0
CVE-2019-17336US	medium6.5	0.88% (59th)	—	no fix	2019-12-17	= 10.6.0
CVE-2019-17335US	medium6.5	0.80% (56th)	—	no fix	2019-12-17	= 10.6.0
CVE-2019-17337US	medium5.4	0.73% (54th)	—	no fix	2019-12-17	= 10.6.0
CVE-2017-3180US	medium5.4	0.61% (49th)	—	no fix	2018-07-24	≤ 7.0.2

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor6 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-287Improper Authentication3 CVEs
CWE-276Incorrect Default Permissions2 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.