CVE Feed

    Dashboard / CVE / CVE-2017-3181

    CVE-2017-3181

    Multiple TIBCO Products are prone to multiple unspecified SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. The following products and versions are affected: TIBCO Spotfire Analyst 7.7.0 TIBCO Spotfire Connectors 7.6.0 TIBCO Spotfire Deployment Kit 7.7.0 TIBCO Spotfire Desktop 7.6.0 TIBCO Spotfire Desktop 7.7.0 TIBCO Spotfire Desktop Developer Edition 7.7.0 TIBCO Spotfire Desktop Language Packs 7.6.0 TIBCO Spotfire Desktop Language Packs 7.7.0 The following components are affected: TIBCO Spotfire Client TIBCO Spotfire Web Player Client

    Published:Jul 24, 2018
    Last Modified:Nov 21, 2024
    EPS:Jul 24, 2018
    EPSS Score:0.00621
    CVSS Score:9.8

    Affected Products

    Vendor
    Tibco
    Product
    Spotfire Analyst
    Vendor
    Tibco
    Product
    Spotfire Client
    Vendor
    Tibco
    Product
    Spotfire Connectors
    Vendor
    Tibco
    Product
    Spotfire Deployment Kit
    Vendor
    Tibco
    Product
    Spotfire Desktop
    Vendor
    Tibco
    Product
    Spotfire Desktop Language Packs
    Vendor
    Tibco
    Product
    Spotfire Web Player Client

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-3115 (CVSS 9.4) — Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system ex…
    CVE-2023-26221 (CVSS 5) — The Spotfire Connectors component of TIBCO Software Inc.'s Spotfire Analyst, Spotfire Server, and Spotfire for…
    CVE-2023-26220 (CVSS 5.4) — The Spotfire Library component of TIBCO Software Inc.'s Spotfire Analyst and Spotfire Server contains an easil…
    CVE-2022-41558 (CVSS 9) — The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Sp…
    CVE-2021-23273 (CVSS 8) — The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platfo…
    CVE-2020-9416 (CVSS 8.2) — The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platfo…
    CVE-2019-17334 (CVSS 8) — The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platfor…
    CVE-2017-3180 (CVSS 5.4) — Multiple TIBCO Products are prone to multiple unspecified cross-site scripting vulnerabilities because it fail…
    CVE-2018-5435 (CVSS 9.6) — The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotf…
    CVE-2018-5437 (CVSS 6.8) — The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotf…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High