Skip to content

Product

TIBCO Software Inc. Spotfire Server vulnerabilities

2 published CVES affecting TIBCO Software Inc. Spotfire Server, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
1
Low
1
Unscored
0
CISA KEV
0

Latest TIBCO Software Inc. Spotfire Server CVEs

Newest publication first

  1. CVE-2023-26221 TIBCO Spotfire Insufficiently Protected Credential vulnerability

    Published
    LowCVSS 3.9 EPSS 0.21%

    The Spotfire Connectors component of TIBCO Software Inc.'s Spotfire Analyst, Spotfire Server, and Spotfire for AWS Marketplace contains an easily exploitable vulnerability that allows a low privileged attacker with read/write access to craft malicious Analyst files. A successful...

  2. CVE-2023-26220 TIBCO Spotfire Stored Cross-site Scripting (XSS) vulnerability

    Published
    MediumCVSS 5.4 EPSS 0.35%

    The Spotfire Library component of TIBCO Software Inc.'s Spotfire Analyst and Spotfire Server contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a Stored Cross Site Scripting (XSS) on the affected system. A successful...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.