Multiple TIBCO Spotfire components are vulnerable to multiple unspecified SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query
Multiple TIBCO Products are prone to multiple unspecified SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. The following products and versions are affected: TIBCO Spotfire Analyst 7.7.0 TIBCO Spotfire Connectors 7.6.0 TIBCO Spotfire Deployment Kit 7.7.0 TIBCO Spotfire Desktop 7.6.0 TIBCO Spotfire Desktop 7.7.0 TIBCO Spotfire Desktop Developer Edition 7.7.0 TIBCO Spotfire Desktop Language Packs 7.6.0 TIBCO Spotfire Desktop Language Packs 7.7.0 The following components are affected: TIBCO Spotfire Client TIBCO Spotfire Web Player Client
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Spotfire Analyst
Vendor
TIBCO
Product
Spotfire Analyst
Platforms
Unknown
Default status
Unknown
Spotfire Analyst · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.7.0
affected
Unavailable
Unavailable
Unavailable
None listed
Spotfire Connectors
Vendor
TIBCO
Product
Spotfire Connectors
Platforms
Unknown
Default status
Unknown
Spotfire Connectors · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.6.0
affected
Unavailable
Unavailable
Unavailable
None listed
Spotfire Deployment Kit
Vendor
TIBCO
Product
Spotfire Deployment Kit
Platforms
Unknown
Default status
Unknown
Spotfire Deployment Kit · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.7.0
affected
Unavailable
Unavailable
Unavailable
None listed
Spotfire Desktop
Vendor
TIBCO
Product
Spotfire Desktop
Platforms
Unknown
Default status
Unknown
Spotfire Desktop · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.6.0
affected
Unavailable
Unavailable
Unavailable
None listed
7.7.0
affected
Unavailable
Unavailable
Unavailable
None listed
Spotfire Desktop Developer Edition
Vendor
TIBCO
Product
Spotfire Desktop Developer Edition
Platforms
Unknown
Default status
Unknown
Spotfire Desktop Developer Edition · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.7.0
affected
Unavailable
Unavailable
Unavailable
None listed
Spotfire Desktop Language Packs
Vendor
TIBCO
Product
Spotfire Desktop Language Packs
Platforms
Unknown
Default status
Unknown
Spotfire Desktop Language Packs · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.6.0
affected
Unavailable
Unavailable
Unavailable
None listed
7.7.0
affected
Unavailable
Unavailable
Unavailable
None listed
Spotfire Web Player Client
Vendor
TIBCO
Product
Spotfire Web Player Client
Platforms
Unknown
Default status
Unknown
Spotfire Web Player Client · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
N/A
unknown
Unavailable
Unavailable
Unavailable
None listed
Spotfire Client
Vendor
TIBCO
Product
Spotfire Client
Platforms
Unknown
Default status
Unknown
Spotfire Client · Scoped product and version facts