CVE-2015-4554
Description
Multiple unspecified vulnerabilities in TIBCO Spotfire Client and Spotfire Web Player Client in Spotfire Analyst before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; Spotfire Analytics Platform for AWS 6.5 and 7.0.x before 7.0.1; Spotfire Automation Services before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; Spotfire Deployment Kit before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; Spotfire Desktop before 6.5.2 and 7.0.x before 7.0.1; Spotfire Desktop Language Packs 7.0.x before 7.0.1; Spotfire Professional before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; Spotfire Web Player before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; and Silver Fabric Enabler for Spotfire Web Player before 2.1.1 allow remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors.
Affected products
46- cpe:2.3:a:tibco:silver_fabric_enabler_for_spotfire_webplayer:2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:tibco:spotfire_analyst:*:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:tibco:spotfire_analyst:*:*:*:*:*:*:*:*range: <=5.5.1
- cpe:2.3:a:tibco:spotfire_analyst:6.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_analyst:6.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_analyst:6.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_analyst:6.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_analyst:6.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_analyst:6.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_analyst:7.0.0:*:*:*:*:*:*:*
cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:6.5:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:6.5:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_analytics_platform_for_aws:7.0.0:*:*:*:*:*:*:*
cpe:2.3:a:tibco:spotfire_automation_services:*:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:tibco:spotfire_automation_services:*:*:*:*:*:*:*:*range: <=5.5.1
- cpe:2.3:a:tibco:spotfire_automation_services:6.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_automation_services:6.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_automation_services:6.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_automation_services:6.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_automation_services:6.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_automation_services:6.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_automation_services:7.0.0:*:*:*:*:*:*:*
cpe:2.3:a:tibco:spotfire_deployment_kit:*:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:tibco:spotfire_deployment_kit:*:*:*:*:*:*:*:*range: <=5.5.1
- cpe:2.3:a:tibco:spotfire_deployment_kit:6.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_deployment_kit:6.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_deployment_kit:6.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_deployment_kit:6.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_deployment_kit:6.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_deployment_kit:6.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_deployment_kit:7.0.0:*:*:*:*:*:*:*
cpe:2.3:a:tibco:spotfire_desktop:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:tibco:spotfire_desktop:*:*:*:*:*:*:*:*range: <=6.5.1
- cpe:2.3:a:tibco:spotfire_desktop:7.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_desktop_language_packs:7.0.0:*:*:*:*:*:*:*
cpe:2.3:a:tibco:spotfire_professional:*:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:tibco:spotfire_professional:*:*:*:*:*:*:*:*range: <=5.5.1
- cpe:2.3:a:tibco:spotfire_professional:6.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_professional:6.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_professional:6.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_professional:6.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_professional:6.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_professional:6.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_professional:7.0.0:*:*:*:*:*:*:*
cpe:2.3:a:tibco:spotfire_web_player:*:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:tibco:spotfire_web_player:*:*:*:*:*:*:*:*range: <=5.5.1
- cpe:2.3:a:tibco:spotfire_web_player:6.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_web_player:6.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_web_player:6.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_web_player:6.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_web_player:6.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_web_player:6.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:tibco:spotfire_web_player:7.0.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.tibco.com/assets/blt1fd126faba191a9f/2015-001-advisory.txtnvdVendor Advisory
- www.tibco.com/mk/advisory.jspnvdVendor Advisory
- www.securitytracker.com/id/1033015nvd
News mentions
0No linked articles in our index yet.