VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Oct 10, 2023· Updated Jun 17, 2026

CVE-2023-26220

CVE-2023-26220

Description

The Spotfire Library component of TIBCO Software Inc.'s Spotfire Analyst and Spotfire Server contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s Spotfire Analyst: versions 11.4.7 and below, versions 11.5.0, 11.6.0, 11.7.0, 11.8.0, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4, versions 12.1.0 and 12.1.1 and Spotfire Server: versions 11.4.11 and below, versions 11.5.0, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.7.0, 11.8.0, 11.8.1, 12.0.0, 12.0.1, 12.0.2, 12.0.3, 12.0.4, and 12.0.5, versions 12.1.0 and 12.1.1.

Affected products

33
  • TIBCO Software/Spotfire Analyst14 versions
    cpe:2.3:a:tibco:spotfire_analyst:*:*:*:*:*:*:*:*+ 13 more
    • cpe:2.3:a:tibco:spotfire_analyst:*:*:*:*:*:*:*:*range: <=11.4.7
    • cpe:2.3:a:tibco:spotfire_analyst:11.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_analyst:11.6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_analyst:11.7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_analyst:11.8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_analyst:12.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_analyst:12.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_analyst:12.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_analyst:12.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_analyst:12.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_analyst:12.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_analyst:12.1.1:*:*:*:*:*:*:*
    • (no CPE)range: <=11.4.7, 11.5.0, 11.6.0, 11.7.0, 11.8.0, 12.0.0, 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.1.1
    • (no CPE)range: 0
  • TIBCO Software/Spotfire Server19 versions
    cpe:2.3:a:tibco:spotfire_server:*:*:*:*:*:*:*:*+ 18 more
    • cpe:2.3:a:tibco:spotfire_server:*:*:*:*:*:*:*:*range: <=11.4.11
    • cpe:2.3:a:tibco:spotfire_server:11.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_server:11.6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_server:11.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_server:11.6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_server:11.6.3:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_server:11.7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_server:11.8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_server:11.8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_server:12.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_server:12.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_server:12.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_server:12.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_server:12.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_server:12.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_server:12.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:spotfire_server:12.1.1:*:*:*:*:*:*:*
    • (no CPE)range: <=11.4.11, 11.5.0, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.7.0, 11.8.0, 11.8.1, 12.0.0, 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.0.5, 12.1.0, 12.1.1
    • (no CPE)range: 0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.