Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2531▼ 362 respecto a la semana anterior
Críticas / altas1338▲ 72 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 6 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
29 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Crítica (9.9) | 0.59% | — | Tibco Spotfire AnalystAITibco Spotfire ServerAITibco Spotfire FOR AWS MarketplaceAI | 27/6/2024 | 17/6/2026 | Vulnerability in Spotfire Spotfire Analyst, Spotfire Spotfire Server, Spotfire Spotfire for AWS Marketplace allows In the case of the installed Windows client: Successful execution of this vulnerability will result in an attacker being able to run arbitrary code.This requires human interaction from a person other than… | |
| Modificada | Baja (3.9) | 0.19% | — | Tibco Spotfire AnalystTibco Spotfire Analytics PlatformTibco Spotfire Server | 8/11/2023 | 17/6/2026 | The Spotfire Connectors component of TIBCO Software Inc.'s Spotfire Analyst, Spotfire Server, and Spotfire for AWS Marketplace contains an easily exploitable vulnerability that allows a low privileged attacker with read/write access to craft malicious Analyst files. A successful attack using this vulnerability… | |
| Modificada | Media (5.4) | 0.30% | — | Tibco Spotfire AnalystTibco Spotfire Server | 10/10/2023 | 17/6/2026 | The Spotfire Library component of TIBCO Software Inc.'s Spotfire Analyst and Spotfire Server contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability… | |
| Modificada | Media (5.4) | 0.53% | — | Tibco Spotfire AnalystTibco Spotfire Analytics PlatformTibco Spotfire DesktopTibco Spotfire Server | 15/11/2022 | 17/6/2026 | The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, TIBCO Spotfire Desktop, TIBCO Spotfire Desktop, TIBCO Spotfire Server, TIBCO Spotfire Server, and TIBCO Spotfire… | |
| Modificada | Alta (8.4) | 0.57% | — | Tibco Spotfire Analytics PlatformTibco Spotfire Server | 20/9/2022 | 17/6/2026 | The Web Player component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows a low privileged attacker with network access to execute blind Server Side Request Forgery (SSRF) on the affected system. Affected… | |
| Modificada | Media (6.8) | 0.82% | — | Tibco Spotfire Server | 14/12/2021 | 17/6/2026 | The Spotfire Server component of TIBCO Software Inc.'s TIBCO Spotfire Server, TIBCO Spotfire Server, and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows malicious custom API clients with network access to execute internal API operations outside of the scope of those granted to it. A… | |
| Modificada | Alta (7.8) | 0.25% | — | Tibco Enterprise Runtime FOR RTibco Spotfire Analytics PlatformTibco Spotfire ServerTibco Spotfire Statistics Services | 29/6/2021 | 17/6/2026 | The TIBCO Spotfire Server and TIBCO Enterprise Runtime for R components of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire… | |
| Modificada | Alta (7.8) | 0.22% | — | Tibco Enterprise Runtime FOR RTibco Spotfire Analytics PlatformTibco Spotfire ServerTibco Spotfire Statistics Services | 29/6/2021 | 17/6/2026 | The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Server, TIBCO Spotfire Server, TIBCO… | |
| Modificada | Media (5.4) | 0.66% | — | Tibco Analytics PlatformTibco Spotfire AnalystTibco Spotfire DesktopTibco Spotfire Server | 9/3/2021 | 17/6/2026 | The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, and TIBCO Spotfire Server contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a stored Cross Site… | |
| Modificada | Media (5.4) | 0.57% | — | Tibco Spotfire AnalystTibco Spotfire Analytics PlatformTibco Spotfire DesktopTibco Spotfire Server | 15/9/2020 | 17/6/2026 | The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, and TIBCO Spotfire Server contains a vulnerability that theoretically allows a legitimate user to inject scripts. If executed by a victim authenticated to the… | |
| Modificada | Alta (8.8) | 1.3% | — | Tibco Spotfire Analytics Platform FOR AWSTibco Spotfire Server | 11/3/2020 | 17/6/2026 | The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theoretically allows an attacker with write permissions to the Spotfire Library, but not "Script Author" group permission, to modify attributes of files… | |
| Modificada | Media (5.4) | 0.73% | — | Tibco Spotfire Analytics Platform FOR AWSTibco Spotfire Server | 17/12/2019 | 17/6/2026 | The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theoretically allows an attacker to perform a reflected cross-site scripting (XSS) attack. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire… | |
| Modificada | Media (6.5) | 0.88% | — | Tibco Spotfire Analytics Platform FOR AWSTibco Spotfire Server | 17/12/2019 | 17/6/2026 | The Data access layer component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains multiple vulnerabilities that theoretically allow an attacker access to information that can lead to obtaining credentials used to access Spotfire data sources. The attacker… | |
| Modificada | Media (6.5) | 0.80% | — | Tibco Spotfire Analytics Platform FOR AWSTibco Spotfire Server | 17/12/2019 | 17/6/2026 | The Data access layer component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains multiple vulnerabilities that theoretically allow an attacker access to data cached from a data source, or a portion of a data source, that the attacker should not have… | |
| Modificada | Media (5.3) | 1.6% | — | Tibco Spotfire Analytics Platform FOR AWSTibco Spotfire Server | 14/5/2019 | 17/6/2026 | The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow a malicious user to undermine the integrity of comments and bookmarks. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire… | |
| Modificada | Media (6.1) | 1.3% | — | Tibco Spotfire Analytics Platform FOR AWSTibco Spotfire Server | 14/5/2019 | 17/6/2026 | The web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow reflected cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS… | |
| Modificada | Crítica (9.8) | 3.1% | — | Tibco Spotfire Analytics Platform FOR AWSTibco Spotfire Server | 16/1/2019 | 17/6/2026 | The TIBCO Spotfire authentication component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability in the handling of the authentication that theoretically may allow an attacker to gain full access to a target account, independent of… | |
| Modificada | Media (6.1) | 1.5% | — | Tibco Spotfire Analytics Platform FOR AWSTibco Spotfire Server | 16/1/2019 | 17/6/2026 | The Spotfire web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains multiple vulnerabilities that may allow persistent and reflected cross-site scripting attacks. Affected releases are TIBCO Software Inc. TIBCO Spotfire Analytics Platform… | |
| Modificada | Media (5.3) | 1.2% | — | Tibco Spotfire Analytics Platform FOR AWSTibco Spotfire Server | 16/1/2019 | 17/6/2026 | The Spotfire Library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability that might theoretically fail to restrict users with read-only access from modifying files stored in the Spotfire Library, only when the Spotfire Library is… | |
| Modificada | Alta (8.8) | 1.0% | — | Tibco Spotfire Analytics Platform FOR AWSTibco Spotfire Server | 27/6/2018 | 17/6/2026 | The Spotfire server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contain multiple vulnerabilities that may allow for the disclosure of information, including user and data source credentials. Affected releases are TIBCO Software Inc.'s TIBCO… | |
| Modificada | Media (6.5) | 0.92% | — | Tibco Spotfire Analytics Platform FOR AWSTibco Spotfire Server | 9/5/2017 | 17/6/2026 | TIBCO Spotfire Server 7.0.X before 7.0.2, 7.5.x before 7.5.1, 7.6.x before 7.6.1, 7.7.x before 7.7.1, and 7.8.x before 7.8.1 and Spotfire Analytics Platform for AWS Marketplace 7.8.0 and earlier contain multiple vulnerabilities which may allow authorized users to perform SQL injection attacks. | |
| Modificada | Media (5) | 2.1% | — | Tibco Spotfire ServerTibco Spotfire Analytics Platform FOR AWS | 28/10/2015 | 17/6/2026 | Spotfire Parsing Library and Spotfire Security Filter in TIBCO Spotfire Server 5.5.x before 5.5.4, 6.0.x before 6.0.5, 6.5.x before 6.5.4, and 7.0.x before 7.0.1 and Spotfire Analytics Platform before 7.0.2 for AWS Marketplace allow remote attackers to obtain sensitive log information by visiting an unspecified URL. | |
| Modificada | Media (4) | 1.7% | — | Tibco Spotfire Analytics Platform FOR AWSTibco Spotfire Server | 28/10/2015 | 17/6/2026 | Spotfire Parsing Library and Spotfire Security Filter in TIBCO Spotfire Server 5.5.x before 5.5.4, 6.0.x before 6.0.5, 6.5.x before 6.5.4, and 7.0.x before 7.0.1 and Spotfire Analytics Platform before 7.0.2 for AWS Marketplace allow remote authenticated users to obtain sensitive system information by visiting an… | |
| Modificada | Alta (7.5) | 2.0% | — | Tibco Spotfire Server | 4/9/2014 | 17/6/2026 | Unspecified vulnerability in the Authentication Module in TIBCO Spotfire Server before 4.5.2, 5.0.x before 5.0.3, 5.5.x before 5.5.2, 6.0.x before 6.0.3, and 6.5.x before 6.5.1 allows remote attackers to gain privileges, and obtain sensitive information or modify data, via unknown vectors. | |
| Modificada | Alta (7.5) | 3.1% | — | Tibco WEB PlayerTibco Automation ServicesTibco Spotfire ServerTibco Spotfire Professional+3 | 10/4/2014 | 17/6/2026 | Unspecified vulnerability in Spotfire Web Player Engine, Spotfire Desktop, and Spotfire Server Authentication Module in TIBCO Spotfire Server 3.3.x before 3.3.4, 4.5.x before 4.5.1, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.2; Spotfire Professional 4.0.x before 4.0.4, 4.5.x before 4.5.2, 5.0.x before… |