CVE-2019-11205

Published: May 14, 2019Modified: Nov 21, 2024

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

The web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow reflected cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: 7.14.0; 7.14.1; 10.0.0; 10.0.1; 10.1.0; 10.2.0, and TIBCO Spotfire Server: 7.14.0; 10.0.0; 10.0.1; 10.1.0; 10.2.0.

Affected (11)

Products: Tibco: Spotfire Analytics Platform For Aws, Spotfire Server

Tibco

2 products

Spotfire Analytics Platform For Aws

Spotfire Server

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Tibco Spotfire Analytics Platform For Aws	Version 10.0.0
Tibco Spotfire Analytics Platform For Aws	Version 10.0.1
Tibco Spotfire Analytics Platform For Aws	Version 10.1.0
Tibco Spotfire Analytics Platform For Aws	Version 10.2.0
Tibco Spotfire Analytics Platform For Aws	Version 7.14.0
Tibco Spotfire Analytics Platform For Aws	Version 7.14.1
Tibco Spotfire Server	Version 10.0.0
Tibco Spotfire Server	Version 10.0.1
Tibco Spotfire Server	Version 10.1.0
Tibco Spotfire Server	Version 10.2.0
Tibco Spotfire Server	Version 7.14.0