CVE Vulnerabilities

CVE-2019-11206

Published: May 14, 2019 | Modified: Jan 30, 2023
CVSS 3.x
5.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

The Spotfire library component of TIBCO Software Inc.s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow a malicious user to undermine the integrity of comments and bookmarks. Affected releases are TIBCO Software Inc.s TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 10.2.0, and TIBCO Spotfire Server: versions up to and including 7.11.2; 7.12.0; 7.13.0; 7.14.0; 10.0.0; 10.0.1; 10.1.0; and 10.2.0.

Affected Software

Name Vendor Start Version End Version
Spotfire_analytics_platform_for_aws Tibco * 10.2.0 (including)
Spotfire_server Tibco * 7.11.2 (including)
Spotfire_server Tibco 7.12.0 (including) 7.12.0 (including)
Spotfire_server Tibco 7.13.0 (including) 7.13.0 (including)
Spotfire_server Tibco 7.14.0 (including) 7.14.0 (including)
Spotfire_server Tibco 10.0.0 (including) 10.0.0 (including)
Spotfire_server Tibco 10.0.1 (including) 10.0.1 (including)
Spotfire_server Tibco 10.1.0 (including) 10.1.0 (including)
Spotfire_server Tibco 10.2.0 (including) 10.2.0 (including)

References