CVE-2011-3132

Cross-site scripting (XSS) vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Published: Sep 2, 2011
Updated: Apr 13, 2023
CVE: CVE-2011-3132
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
tibco / spotfire_server	3.0.0	3.0.0.x
tibco / spotfire_server	3.3.0	3.3.0.x
tibco / spotfire_server	3.1.1	3.1.1.x
tibco / spotfire_server	3.1.0	3.1.0.x
tibco / spotfire_analytics_server	-	10.0.1.x
tibco / spotfire_server	3.2.0	3.2.0.x
tibco / spotfire_analytics_server	10.0.0	10.0.0.x
tibco / spotfire_server	3.0.1	3.0.1.x

http://secunia.com/advisories/45864
http://www.securitytracker.com/id?1025999
http://www.tibco.com/multimedia/spotfire_advisory_20110831_tcm8-14230.txt
http://www.tibco.com/services/support/advisories/default.jsp

Vulnerability Database

289,784

CVE-2011-3132