PT-2019-15097 · Tibco · Tibco Spotfire Analytics Platform For Aws Marketplace+1

Publicado 2019-12-17 · Atualizado 2019-12-20 · CVE-2019-17337

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions TIBCO Spotfire Analytics Platform for AWS Marketplace version 10.6.0 TIBCO Spotfire Server versions 7.11.7 and below, versions 7.12.0, 7.13.0, 7.14.0, 10.0.0, 10.0.1, 10.1.0, 10.2.0, 10.2.1, 10.3.0, 10.3.1, 10.3.2, 10.3.3, 10.3.4, 10.4.0, 10.5.0, and 10.6.0

Description The Spotfire library component contains a vulnerability that theoretically allows an attacker to perform a reflected cross-site scripting (XSS) attack.

Recommendations For TIBCO Spotfire Analytics Platform for AWS Marketplace version 10.6.0, update to a version that contains a fix for this issue. For TIBCO Spotfire Server versions 7.11.7 and below, update to a version that contains a fix for this issue. For TIBCO Spotfire Server versions 7.12.0, 7.13.0, 7.14.0, 10.0.0, 10.0.1, 10.1.0, 10.2.0, 10.2.1, 10.3.0, 10.3.1, 10.3.2, 10.3.3, 10.3.4, 10.4.0, 10.5.0, and 10.6.0, update to a version that contains a fix for this issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-17337

Produtos afetados

Tibco Spotfire Analytics Platform For Aws Marketplace

Tibco Spotfire Server

Referências · 4

• https://osv.dev/vulnerability/CVE-2019-17337 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-17337 · Nota de Segurança
• https://tibco.com/support/advisories/2019/12/tibco-security-advisory-december-17-2019-tibco-spotfire-2019-17337 · Aviso do Fabricante
• http://tibco.com/services/support/advisories · Aviso do Fabricante