VYPR
Unrated severityNVD Advisory· Published Mar 13, 2012· Updated Apr 29, 2026

CVE-2012-0690

CVE-2012-0690

Description

TIBCO Spotfire Web Application, Web Player Application, Automation Services Application, and Analytics Client Application in Spotfire Analytics Server before 10.1.2; Server before 3.3.3; and Web Player, Automation Services, and Professional before 4.0.2 allow remote attackers to obtain sensitive information via a crafted URL.

Affected products

10
  • cpe:2.3:a:tibco:spotfire_analytics_server:10.0.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:tibco:spotfire_analytics_server:10.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_analytics_server:10.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:tibco:spotfire_professional:*:*:*:*:*:*:*:*
    Range: <=4.0.1
  • cpe:2.3:a:tibco:spotfire_server:3.0.0:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:tibco:spotfire_server:3.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_server:3.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_server:3.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_server:3.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_server:3.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_server:3.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:tibco:web_player_automation_services:*:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.