CVE Feed

    Dashboard / CVE / CVE-2022-30579

    CVE-2022-30579

    The Web Player component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows a low privileged attacker with network access to execute blind Server Side Request Forgery (SSRF) on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: version 12.0.0 and TIBCO Spotfire Server: version 12.0.0.

    Published:Sep 20, 2022
    Last Modified:May 28, 2025
    EPS:Sep 20, 2022
    EPSS Score:0.00152
    CVSS Score:7.1

    Affected Products

    Vendor
    Tibco
    Product
    Spotfire Analytics Platform
    Vendor
    Tibco
    Product
    Spotfire Server

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-664 Server Side Request Forgery

    Related CVEs

    CVE-2025-3115 (CVSS 9.4) — Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system ex…
    CVE-2023-26221 (CVSS 5) — The Spotfire Connectors component of TIBCO Software Inc.'s Spotfire Analyst, Spotfire Server, and Spotfire for…
    CVE-2022-41558 (CVSS 9) — The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Sp…
    CVE-2021-28830 (CVSS 8.8) — The TIBCO Spotfire Server and TIBCO Enterprise Runtime for R components of TIBCO Software Inc.'s TIBCO Enterpr…
    CVE-2021-23275 (CVSS 8.8) — The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, T…
    CVE-2020-9416 (CVSS 8.2) — The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platfo…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High