Vulnerability in Tibco Silver Fabric Enabler For Spotfire Webplayer
CVE-2015-4554
Multiple unspecified vulnerabilities in TIBCO Spotfire Client and Spotfire Web Player Client in Spotfire Analyst before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; Spotfire Analytics Platform for AWS 6.5 and 7.0.x before 7.0.1; Spotfire Automation Services before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; Spotfire Deployment Kit before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; Spotfire Desktop before 6.5.2 and 7.0.x before 7.0.1; Spotfire Desktop Language Packs 7.0.x before 7.0.1; Spotfire Professional before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; Spotfire Web Player before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; and Silver Fabric Enabler for Spotfire Web Player before 2.1.1 allow remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors.
EPSS: 0.035 (87.9th percentile) — read the EPSS interpretation.
Affected products
- Tibco Silver_fabric_enabler_for_spotfire_webplayer — versions 2.1.0
- Tibco Spotfire_analyst — versions 6.0.0, 6.0.1, 6.0.2
- Tibco Spotfire_analytics_platform_for_aws — versions 6.5, 7.0.0
- Tibco Spotfire_automation_services — versions 6.0.0, 6.0.1, 6.0.2
- Tibco Spotfire_deployment_kit — versions 6.0.0, 6.0.1, 6.0.2
- Tibco Spotfire_desktop — versions 7.0.0
- Tibco Spotfire_desktop_language_packs — versions 7.0.0
- Tibco Spotfire_professional — versions 6.0.0, 6.0.1, 6.0.2
- Tibco Spotfire_web_player — versions 6.0.0, 6.0.1, 6.0.2
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)