Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-11206

Опубликовано: 14 мая 2019
Источник: nvd
CVSS3: 4.3
CVSS3: 5.3
CVSS2: 5
EPSS Низкий

Описание

The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow a malicious user to undermine the integrity of comments and bookmarks. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 10.2.0, and TIBCO Spotfire Server: versions up to and including 7.11.2; 7.12.0; 7.13.0; 7.14.0; 10.0.0; 10.0.1; 10.1.0; and 10.2.0.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:*:*:*:*:*:*:*:*
Версия до 10.2.0 (включая)
cpe:2.3:a:tibco:spotfire_server:*:*:*:*:*:*:*:*
Версия до 7.11.2 (включая)
cpe:2.3:a:tibco:spotfire_server:7.12.0:*:*:*:*:*:*:*
cpe:2.3:a:tibco:spotfire_server:7.13.0:*:*:*:*:*:*:*
cpe:2.3:a:tibco:spotfire_server:7.14.0:*:*:*:*:*:*:*
cpe:2.3:a:tibco:spotfire_server:10.0.0:*:*:*:*:*:*:*
cpe:2.3:a:tibco:spotfire_server:10.0.1:*:*:*:*:*:*:*
cpe:2.3:a:tibco:spotfire_server:10.1.0:*:*:*:*:*:*:*
cpe:2.3:a:tibco:spotfire_server:10.2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 51%
0.00278
Низкий

4.3 Medium

CVSS3

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 5.3
github
больше 3 лет назад

The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow a malicious user to undermine the integrity of comments and bookmarks. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 10.2.0, and TIBCO Spotfire Server: versions up to and including 7.11.2; 7.12.0; 7.13.0; 7.14.0; 10.0.0; 10.0.1; 10.1.0; and 10.2.0.

EPSS

Процентиль: 51%
0.00278
Низкий

4.3 Medium

CVSS3

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo