Total vulnerabilities in the database
TIBCO Spotfire Web Application, Web Player Application, Automation Services Application, and Analytics Client Application in Spotfire Analytics Server before 10.1.2; Server before 3.3.3; and Web Player, Automation Services, and Professional before 4.0.2 allow remote attackers to obtain sensitive information via a crafted URL.
| Software | From | Fixed in |
|---|---|---|
| tibco / spotfire_server | 3.0.0 | 3.0.0.x |
| tibco / spotfire_server | 3.3.0 | 3.3.0.x |
| tibco / spotfire_server | 3.1.1 | 3.1.1.x |
| tibco / spotfire_server | 3.1.0 | 3.1.0.x |
| tibco / spotfire_server | 3.2.0 | 3.2.0.x |
| tibco / spotfire_analytics_server | 10.0.0 | 10.0.0.x |
| tibco / spotfire_analytics_server | 10.0.1 | 10.0.1.x |
| tibco / spotfire_server | 3.0.1 | 3.0.1.x |
| tibco / web_player_automation_services | - | - |
| tibco / spotfire_professional | - | 4.0.1.x |