CVE-2019-17337

TIBCO Spotfire Server Library Vulnerable to Reflected Cross-Site Scripting

High · published December 17, 2019

CVSS v3.0
8.1
EPSS
1%
Percentile
53.6
In the wild
Unconfirmed
What it is

The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theoretically allows an attacker to perform a reflected cross-site scripting (XSS) attack. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: version 10.6.0 and TIBCO Spotfire Server: versions 7.11.7 and below, versions 7.12.0, 7.13.0, 7.14.0, 10.0.0, 10.0.1, 10.1.0, 10.2.0, 10.2.1, 10.3.0, 10.3.1, 10.3.2, 10.3.3, and 10.3.4, versions 10.4.0, 10.5.0, and 10.6.0.

The record
Technical detail
CVSS v3.0
8.1 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00727 · 53.6th percentile
Published
2019-12-17T20:55Z
EPSS history
Timeline
  • 17 DEC 20:55Z
    TIBCO Spotfire Server Library Vulnerable to Reflected Cross-Site Scripting
    cvelistv5