cveboard RSS feed

CVE-2017-3180

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2017
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Multiple TIBCO Spotfire components fail to sanitize user-supplied inout and are vulnerable to cross-site scripting

Multiple TIBCO Products are prone to multiple unspecified cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and to launch other attacks. The products and versions that are affected include the following: TIBCO Silver Fabric Enabler for Spotfire Web Player 2.1.2 and earlier TIBCO Spotfire Analyst 7.5.0 TIBCO Spotfire Analyst 7.6.0 TIBCO Spotfire Analyst 7.7.0 TIBCO Spotfire Analytics Platform for AWS Marketplace 7.0.2 and earlier TIBCO Spotfire Automation Services 6.5.3 and earlier TIBCO Spotfire Automation Services 7.0.0, and 7.0.1 TIBCO Spotfire Connectors 7.6.0 TIBCO Spotfire Deployment Kit 6.5.3 and earlier TIBCO Spotfire Deployment Kit 7.0.0, and 7.0.1 TIBCO Spotfire Deployment Kit 7.5.0 TIBCO Spotfire Deployment Kit 7.6.0 TIBCO Spotfire Deployment Kit 7.7.0 TIBCO Spotfire Desktop 6.5.2 and earlier TIBCO Spotfire Desktop 7.0.0, and 7.0.1 TIBCO Spotfire Desktop 7.5.0 TIBCO Spotfire Desktop 7.6.0 TIBCO Spotfire Desktop 7.7.0 TIBCO Spotfire Desktop Developer Edition 7.7.0 TIBCO Spotfire Desktop Language Packs 7.0.1 and earlier TIBCO Spotfire Desktop Language Packs 7.5.0 TIBCO Spotfire Desktop Language Packs 7.6.0 TIBCO Spotfire Desktop Language Packs 7.7.0 TIBCO Spotfire Professional 6.5.3 and earlier TIBCO Spotfire Professional 7.0.0 and 7.0.1 TIBCO Spotfire Web Player 6.5.3 and earlier TIBCO Spotfire Web Player 7.0.0 and 7.0.1

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Silver Fabric Enabler for Spotfire Web Player

Vendor
TIBCO
Product
Silver Fabric Enabler for Spotfire Web Player
Platforms
Unknown
Default status
Unknown
Silver Fabric Enabler for Spotfire Web Player · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
2.1.2affectedcustomUnavailable2.1.2None listed

Spotfire Analyst

Vendor
TIBCO
Product
Spotfire Analyst
Platforms
Unknown
Default status
Unknown
Spotfire Analyst · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
7.5.0affectedUnavailableUnavailableUnavailableNone listed
7.6.0affectedUnavailableUnavailableUnavailableNone listed
7.7.0affectedUnavailableUnavailableUnavailableNone listed

Spotfire Analytics Platform for AWS Marketplace

Vendor
TIBCO
Product
Spotfire Analytics Platform for AWS Marketplace
Platforms
Unknown
Default status
Unknown
Spotfire Analytics Platform for AWS Marketplace · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
7.0.2affectedcustomUnavailable7.0.2None listed

Spotfire Automation Services 6

Vendor
TIBCO
Product
Spotfire Automation Services 6
Platforms
Unknown
Default status
Unknown
Spotfire Automation Services 6 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
7.0.0affectedUnavailableUnavailableUnavailableNone listed
7.0.1affectedUnavailableUnavailableUnavailableNone listed
6.5.3affectedcustomUnavailable6.5.3None listed

Spotfire Connectors

Vendor
TIBCO
Product
Spotfire Connectors
Platforms
Unknown
Default status
Unknown
Spotfire Connectors · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
7.6.0affectedUnavailableUnavailableUnavailableNone listed

Spotfire Deployment Kit

Vendor
TIBCO
Product
Spotfire Deployment Kit
Platforms
Unknown
Default status
Unknown
Spotfire Deployment Kit · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
7.0.0affectedUnavailableUnavailableUnavailableNone listed
7.0.1affectedUnavailableUnavailableUnavailableNone listed
7.5.0affectedUnavailableUnavailableUnavailableNone listed
7.6.0affectedUnavailableUnavailableUnavailableNone listed
7.7.0affectedUnavailableUnavailableUnavailableNone listed
6.5.3affectedcustomUnavailable6.5.3None listed

Spotfire Desktop

Vendor
TIBCO
Product
Spotfire Desktop
Platforms
Unknown
Default status
Unknown
Spotfire Desktop · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
7.0.0affectedUnavailableUnavailableUnavailableNone listed
7.0.1affectedUnavailableUnavailableUnavailableNone listed
7.5.0affectedUnavailableUnavailableUnavailableNone listed
7.6.0affectedUnavailableUnavailableUnavailableNone listed
7.7.0affectedUnavailableUnavailableUnavailableNone listed
6.5.2affectedcustomUnavailable6.5.2None listed

Spotfire Desktop Developer Edition

Vendor
TIBCO
Product
Spotfire Desktop Developer Edition
Platforms
Unknown
Default status
Unknown
Spotfire Desktop Developer Edition · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
7.7.0affectedUnavailableUnavailableUnavailableNone listed

Spotfire Desktop Language Packs

Vendor
TIBCO
Product
Spotfire Desktop Language Packs
Platforms
Unknown
Default status
Unknown
Spotfire Desktop Language Packs · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
7.5.0affectedUnavailableUnavailableUnavailableNone listed
7.6.0affectedUnavailableUnavailableUnavailableNone listed
7.7.0affectedUnavailableUnavailableUnavailableNone listed
7.0.1affectedcustomUnavailable7.0.1None listed

Spotfire Professional

Vendor
TIBCO
Product
Spotfire Professional
Platforms
Unknown
Default status
Unknown
Spotfire Professional · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
7.0.0affectedUnavailableUnavailableUnavailableNone listed
7.0.1affectedUnavailableUnavailableUnavailableNone listed
6.5.3affectedcustomUnavailable6.5.3None listed

Spotfire Web Player

Vendor
TIBCO
Product
Spotfire Web Player
Platforms
Unknown
Default status
Unknown
Spotfire Web Player · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
7.0.0affectedUnavailableUnavailableUnavailableNone listed
7.0.1affectedUnavailableUnavailableUnavailableNone listed
6.5.3affectedcustomUnavailable6.5.3None listed