CVE-2012-0690

TIBCO Spotfire Web Application, Web Player Application, Automation Services Application, and Analytics Client Application in Spotfire Analytics Server before 10.1.2; Server before 3.3.3; and Web Player, Automation Services, and Professional before 4.0.2 allow remote attackers to obtain sensitive information via a crafted URL.
Severity
UNKNOWN
AV:N/AC:L/Au:N/C:P/I:N/A:N
Atk. Vector
NETWORK
Atk. Complexity
LOW
Base Score
CVSS 3.x
EPSS Score
Percentile: 69%
VendorProductVersion
tibcospotfire_analytics_server
10.0.0
tibcospotfire_analytics_server
10.0.1
tibcospotfire_server
3.0.0
tibcospotfire_server
3.0.1
tibcospotfire_server
3.1.0
tibcospotfire_server
3.1.1
tibcospotfire_server
3.2.0
tibcospotfire_server
3.3.0
tibcoweb_player_automation_services
*
tibcospotfire_professional
𝑥
≤ 4.0.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.tibco.com/multimedia/spotfire_advisory_20120308_tcm8-15731.txt
http://www.tibco.com/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp
http://www.tibco.com/multimedia/spotfire_advisory_20120308_tcm8-15731.txt
http://www.tibco.com/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp