PT-2022-20187 · Tibco Software · Tibco Spotfire Server+1

Published 2022-09-20 · Updated 2025-05-28 · CVE-2022-30579

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions TIBCO Spotfire Analytics Platform for AWS Marketplace version 12.0.0 TIBCO Spotfire Server version 12.0.0

Description The Web Player component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows a low privileged attacker with network access to execute blind Server Side Request Forgery (SSRF) on the affected system.

Recommendations For TIBCO Spotfire Analytics Platform for AWS Marketplace version 12.0.0, update to a version that contains a fix for this issue. For TIBCO Spotfire Server version 12.0.0, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting network access to the Web Player component to minimize the risk of exploitation.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2022-30579

Affected Products

Tibco Spotfire Analytics Platform For Aws Marketplace

Tibco Spotfire Server

References · 6

• https://tibco.com/support/advisories/2022/09/tibco-security-advisory-september-20-2022-tibco-spotfire-cve-2022-30579 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-30579 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-30579 · Security Note
• https://tibco.com/services/support/advisories · Vendor Advisory
• https://t.me/cibsecurity/50145 · Telegram Post
• https://t.me/cvenotify/123899 · Telegram Post