How many TIBCO spotfire server CVEs are in CISA KEV?

None of TIBCO spotfire server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of TIBCO spotfire server are affected?

127 distinct TIBCO spotfire server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in TIBCO spotfire server CVEs?

TIBCO spotfire server's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-250 (Execution with Unnecessary Privileges), CWE-522 (Insufficiently Protected Credentials), CWE-918 (Server-Side Request Forgery (SSRF)).

How many critical TIBCO spotfire server vulnerabilities are there?

TIBCO spotfire server has 3 critical and 13 high-severity CVEs.

What is the average severity of TIBCO spotfire server CVEs?

The average CVSS base score across TIBCO spotfire server's scored CVEs is 7.1.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

TIBCO

29 CVEs

TIBCO spotfire server Vulnerabilities

Name: TIBCO spotfire server vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for spotfire server by TIBCO.

29

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.1

Avg CVSS

2011–2024

Last updated June 27, 2024

Overview

TIBCO spotfire server has 29 published CVE records since 2011, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.1.

This page aggregates every publicly disclosed vulnerability (CVE) affecting TIBCO spotfire server, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of TIBCO spotfire server's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High13

Medium13

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of TIBCO spotfire server's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No TIBCO spotfire server CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every TIBCO spotfire server version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

12.1.02 CVEs
12.1.12 CVEs
12.3.02 CVEs
12.4.02 CVEs
12.5.02 CVEs
11.5.01 CVE
11.6.01 CVE
11.6.11 CVE
11.6.21 CVE
11.6.31 CVE
11.7.01 CVE
11.8.01 CVE
11.8.11 CVE
12.0.01 CVE
12.0.11 CVE
12.0.21 CVE
12.0.31 CVE
12.0.41 CVE
12.0.51 CVE
12.2.01 CVE
14.0.01 CVE
14.0.11 CVE
14.0.21 CVE
14.0.31 CVE
14.2.01 CVE
14.3.01 CVE

Version ranges

7.12.0 <= v <= 7.12.09 CVEs
7.14.0 <= v <= 7.14.09 CVEs
10.0.0 <= v <= 10.0.08 CVEs
7.13.0 <= v <= 7.13.08 CVEs
10.0.1 <= v <= 10.0.16 CVEs
10.1.0 <= v <= 10.1.06 CVEs
10.2.0 <= v <= 10.2.06 CVEs
10.4.0 <= v <= 10.4.06 CVEs
10.5.0 <= v <= 10.5.06 CVEs
10.6.0 <= v <= 10.6.06 CVEs
10.7.0 <= v <= 10.7.05 CVEs
10.8.0 <= v <= 10.8.05 CVEs
10.10.0 <= v <= 10.10.04 CVEs

Fixed in

> 11.4.111 CVE
> 12.0.101 CVE

Find a version

29 CVEs

Sort

Critical vulnerability · 2024-06-27
CVE-2024-3330
Patch
CWE-250
Critical · CVSS 9.9
EPSS 0.6% (45th pct)2024-06-27
TIBCO Spotfire Insufficiently Protected Credential vulnerability
CVE-2023-26221
Patch
CWE-522
Medium · CVSS 5.0
EPSS 0.2% (9th pct)2023-11-08
Medium vulnerability · 2023-10-10
CVE-2023-26220
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.3% (22th pct)2023-10-10
Critical vulnerability · 2022-11-15
CVE-2022-41558
Patch
CWE-79
Critical · CVSS 9.0
EPSS 0.5% (40th pct)2022-11-15
High vulnerability · 2022-09-20
CVE-2022-30579
Patch
CWE-918
High · CVSS 8.4
EPSS 0.5% (40th pct)2022-09-20
High vulnerability · 2021-12-14
CVE-2021-43051
Patch
High · CVSS 7.1
EPSS 0.8% (54th pct)2021-12-14
High vulnerability · 2021-06-29
CVE-2021-28830
Patch
High · CVSS 8.8
EPSS 0.2% (16th pct)2021-06-29
High vulnerability · 2021-06-29
CVE-2021-23275
Patch
High · CVSS 8.8
EPSS 0.2% (12th pct)2021-06-29
High vulnerability · 2021-03-09
CVE-2021-23273
Patch
High · CVSS 8.0
EPSS 0.6% (47th pct)2021-03-09
High vulnerability · 2020-09-15
CVE-2020-9416
Patch
High · CVSS 8.2
EPSS 0.6% (44th pct)2020-09-15
TIBCO Spotfire Server Script Trust Problem Exposes Remote Code Execution Vulnerability
CVE-2020-9408
Patch
High · CVSS 8.8
EPSS 1.3% (67th pct)2020-03-11
Medium vulnerability · 2019-12-17
CVE-2019-17337
Patch
Medium · CVSS 5.4
EPSS 0.7% (50th pct)2019-12-17
Medium vulnerability · 2019-12-17
CVE-2019-17336
Patch
Medium · CVSS 6.5
EPSS 0.9% (56th pct)2019-12-17
TIBCO Spotfire Server Exposes User-Specific Cached Data To Others Users
CVE-2019-17335
Patch
Medium · CVSS 6.5
EPSS 0.8% (53th pct)2019-12-17
Medium vulnerability · 2019-05-14
CVE-2019-11206
Patch
Medium · CVSS 5.3
EPSS 1.6% (73th pct)2019-05-14
TIBCO Spotfire Server Exposes Multiple Reflected Cross-Site Scripting Vulnerabilities
CVE-2019-11205
Patch
High · CVSS 8.8
EPSS 1.3% (67th pct)2019-05-14
Critical vulnerability · 2019-01-16
CVE-2018-18814
Patch
Critical · CVSS 9.8
EPSS 3.1% (86th pct)2019-01-16
High vulnerability · 2019-01-16
CVE-2018-18813
Patch
High · CVSS 8.8
EPSS 1.5% (71th pct)2019-01-16
Medium vulnerability · 2019-01-16
CVE-2018-18812
Patch
Medium · CVSS 6.5
EPSS 1.2% (64th pct)2019-01-16
TIBCO Spotfire Server information disclosure vulnerabilities
CVE-2018-5436
Patch
High · CVSS 8.8
EPSS 1.0% (59th pct)2018-06-27
TIBCO Spotfire injection vulnerabilities
CVE-2017-5527
Medium · CVSS 6.5
EPSS 0.9% (57th pct)2017-05-09
Medium vulnerability · 2015-10-28
CVE-2015-5713
Medium · CVSS 5.0
EPSS 2.1% (80th pct)2015-10-28
Medium vulnerability · 2015-10-28
CVE-2015-5712
Medium · CVSS 4.0
EPSS 1.7% (75th pct)2015-10-28
High vulnerability · 2014-09-04
CVE-2014-5285
High · CVSS 7.5
EPSS 2.0% (79th pct)2014-09-04
High vulnerability · 2014-04-09
CVE-2014-2544
High · CVSS 7.5
EPSS 3.1% (86th pct)2014-04-09
Medium vulnerability · 2012-03-13
CVE-2012-0690
Medium · CVSS 5.0
EPSS 1.6% (74th pct)2012-03-13
High vulnerability · 2011-09-02
CVE-2011-3134
High · CVSS 7.5
EPSS 2.2% (81th pct)2011-09-02
Medium vulnerability · 2011-09-02
CVE-2011-3133
Medium · CVSS 4.3
EPSS 1.7% (75th pct)2011-09-02
Medium vulnerability · 2011-09-02
CVE-2011-3132
Medium · CVSS 4.3
EPSS 1.7% (74th pct)2011-09-02

Common weakness types

The CWE weakness categories most often found in TIBCO spotfire server CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many TIBCO spotfire server CVEs were published each year.

2011

3

2012

1

2014

2

2015

2

2017

1

2018

1

2019

8

2020

2

2021

4

2022

2

2023

2

2024

1

Other TIBCO products

Browse vulnerabilities for other products by TIBCO.

jasperreports server24 CVEs TIBCO JasperReports Server22 CVEs TIBCO Spotfire Analytics Platform for AWS Marketplace22 CVEs spotfire analytics platform for aws21 CVEs TIBCO JasperReports Server for ActiveMatrix BPM19 CVEs TIBCO Spotfire Server17 CVEs rendezvous16 CVEs spotfire analyst13 CVEs

All TIBCO vulnerabilities

Frequently asked questions

Common questions about TIBCO spotfire server vulnerabilities.

How many CVEs does TIBCO spotfire server have?: TIBCO spotfire server has 29 published CVE records since 2011.
How many TIBCO spotfire server CVEs are in CISA KEV?: None of TIBCO spotfire server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for TIBCO spotfire server vulnerabilities?: No TIBCO spotfire server CVEs currently have a tracked public exploit in this dataset.
Which versions of TIBCO spotfire server are affected?: 127 distinct TIBCO spotfire server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in TIBCO spotfire server CVEs?: TIBCO spotfire server's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-250 (Execution with Unnecessary Privileges), CWE-522 (Insufficiently Protected Credentials), CWE-918 (Server-Side Request Forgery (SSRF)).
How many critical TIBCO spotfire server vulnerabilities are there?: TIBCO spotfire server has 3 critical and 13 high-severity CVEs.
What is the average severity of TIBCO spotfire server CVEs?: The average CVSS base score across TIBCO spotfire server's scored CVEs is 7.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track TIBCO spotfire server vulnerabilities

Monitor new TIBCO spotfire server vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

10.10.1 <= v <= 10.10.14 CVEs

10.3.0 <= v <= 10.3.04 CVEs

10.3.1 <= v <= 10.3.14 CVEs

10.3.2 <= v <= 10.3.24 CVEs

10.3.3 <= v <= 10.3.34 CVEs

10.3.4 <= v <= 10.3.44 CVEs

10.8.1 <= v <= 10.8.14 CVEs

10.9.0 <= v <= 10.9.04 CVEs

11.0.0 <= v <= 11.0.04 CVEs

11.1.0 <= v <= 11.1.04 CVEs

3.0.0 <= v <= 3.0.04 CVEs

3.0.1 <= v <= 3.0.14 CVEs

3.1.0 <= v <= 3.1.04 CVEs

3.1.1 <= v <= 3.1.14 CVEs

3.2.0 <= v <= 3.2.04 CVEs

3.3.0 <= v <= 3.3.04 CVEs

5.5.0 <= v <= 5.5.04 CVEs

6.0.0 <= v <= 6.0.04 CVEs

6.0.1 <= v <= 6.0.14 CVEs

7.11.0 <= v <= 7.11.04 CVEs

<= 7.10.13 CVEs

<= 7.11.73 CVEs

10.10.2 <= v <= 10.10.23 CVEs

10.10.3 <= v <= 10.10.33 CVEs

10.2.1 <= v <= 10.2.13 CVEs

10.6.1 <= v <= 10.6.13 CVEs

11.2.0 <= v <= 11.2.03 CVEs

11.3.0 <= v <= 11.3.03 CVEs

11.5.0 <= v <= 11.5.03 CVEs

11.6.0 <= v <= 11.6.03 CVEs

12.0.0 <= v <= 12.0.03 CVEs

5.0.0 <= v <= 5.0.03 CVEs

5.0.1 <= v <= 5.0.13 CVEs

5.5.1 <= v <= 5.5.13 CVEs

6.0.2 <= v <= 6.0.23 CVEs

6.5.0 <= v <= 6.5.03 CVEs

7.0.0 <= v <= 7.0.03 CVEs

7.11.1 <= v <= 7.11.13 CVEs

<= 10.3.122 CVEs

10.10.4 <= v <= 10.10.42 CVEs

11.6.1 <= v <= 11.6.12 CVEs

11.6.2 <= v <= 11.6.22 CVEs

11.6.3 <= v <= 11.6.32 CVEs

11.7.0 <= v <= 11.7.02 CVEs

11.8.0 <= v <= 11.8.02 CVEs

11.8.1 <= v <= 11.8.12 CVEs

12.0.1 <= v <= 12.0.12 CVEs

12.1.0 <= v <= 12.1.02 CVEs

4.5.0 <= v <= 4.5.02 CVEs

5.0.2 <= v <= 5.0.22 CVEs

5.5.2 <= v <= 5.5.22 CVEs

5.5.3 <= v <= 5.5.32 CVEs

6.0.3 <= v <= 6.0.32 CVEs

6.0.4 <= v <= 6.0.42 CVEs

6.5.1 <= v <= 6.5.12 CVEs

6.5.2 <= v <= 6.5.22 CVEs

6.5.3 <= v <= 6.5.32 CVEs

<= 10.10.61 CVE

<= 10.3.111 CVE

<= 11.4.111 CVE

<= 11.4.81 CVE

<= 12.0.101 CVE

<= 3.3.31 CVE

<= 4.5.11 CVE

<= 7.11.21 CVE

<= 7.11.91 CVE

<= 7.8.11 CVE

10.3.5 <= v <= 10.3.51 CVE

10.3.6 <= v <= 10.3.61 CVE

11.4.0 <= v <= 11.4.01 CVE

11.4.1 <= v <= 11.4.11 CVE

12.0.2 <= v <= 12.0.21 CVE

12.0.3 <= v <= 12.0.31 CVE

12.0.4 <= v <= 12.0.41 CVE

12.0.5 <= v <= 12.0.51 CVE

12.1.1 <= v <= 12.1.11 CVE

12.3.0 <= v <= 12.3.01 CVE

12.4.0 <= v <= 12.4.01 CVE

12.5.0 <= v <= 12.5.01 CVE

7.0.1 <= v <= 7.0.11 CVE

7.10.0 <= v <= 7.10.01 CVE

7.5.0 <= v <= 7.5.01 CVE

7.6.0 <= v <= 7.6.01 CVE

7.7.0 <= v <= 7.7.01 CVE

7.8.0 <= v <= 7.8.01 CVE

7.9.0 <= v <= 7.9.01 CVE