CVE-2022-30579

TIBCO Spotfire Server Blind SSRF vulnerability

High · published September 20, 2022

CVSS v3.1
7.1
EPSS
1%
Percentile
47.4
In the wild
Unconfirmed
What it is

The Web Player component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows a low privileged attacker with network access to execute blind Server Side Request Forgery (SSRF) on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: version 12.0.0 and TIBCO Spotfire Server: version 12.0.0.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00588 · 47.4th percentile
Published
2022-09-20T18:55Z
EPSS history
Timeline
  • 20 SEP 18:55Z
    TIBCO Spotfire Server Blind SSRF vulnerability
    cvelistv5