CVE-2019-11205

TIBCO Spotfire Server Exposes Multiple Reflected Cross-Site Scripting Vulnerabilities

High · published May 14, 2019

CVSS v3.0
8.8
EPSS
1%
Percentile
69.5
In the wild
Unconfirmed
What it is

The web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow reflected cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: 7.14.0; 7.14.1; 10.0.0; 10.0.1; 10.1.0; 10.2.0, and TIBCO Spotfire Server: 7.14.0; 10.0.0; 10.0.1; 10.1.0; 10.2.0.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01267 · 69.5th percentile
Published
2019-05-14T19:57Z
EPSS history
Timeline
  • 14 MAY 19:57Z
    TIBCO Spotfire Server Exposes Multiple Reflected Cross-Site Scripting Vulnerabilities
    cvelistv5