CVE-2014-7195

Опубликовано: 21 нояб. 2014

Источник: nvd

CVSS2: 4

EPSS Низкий

Описание

Spotfire Web Player Engine in TIBCO Spotfire Web Player 6.0.x before 6.0.2 and 6.5.x before 6.5.2, Spotfire Deployment Kit 6.0.x before 6.0.2 and 6.5.x before 6.5.2, and Silver Fabric Enabler for Spotfire Web Player before 1.6.1 allows remote authenticated users to obtain sensitive information via unspecified vectors.

Ссылки

http://www.tibco.com/assets/blta5b5c969aff51474/2014-009-spotfire-advisory.txt
Vendor Advisory
http://www.tibco.com/mk/advisory.jsp
Vendor Advisory
http://www.tibco.com/assets/blta5b5c969aff51474/2014-009-spotfire-advisory.txt
Vendor Advisory
http://www.tibco.com/mk/advisory.jsp
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:tibco:silver_fabric_enabler:*:*:*:*:*:spotfire_web_player:*:*

Версия до 1.6.0 (включая)

Конфигурация 2

Одно из

cpe:2.3:a:tibco:spotfire_deployment_kit:6.0.0:*:*:*:*:*:*:*

cpe:2.3:a:tibco:spotfire_deployment_kit:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:tibco:spotfire_deployment_kit:6.5.0:*:*:*:*:*:*:*

cpe:2.3:a:tibco:spotfire_deployment_kit:6.5.1:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:tibco:spotfire_web_player:6.0.0:*:*:*:*:*:*:*

cpe:2.3:a:tibco:spotfire_web_player:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:tibco:spotfire_web_player:6.5.0:*:*:*:*:*:*:*

cpe:2.3:a:tibco:spotfire_web_player:6.5.1:*:*:*:*:*:*:*

EPSS

Процентиль: 34%

0.00141

Низкий

4 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-9323-82qh-98r9

github

больше 3 лет назад