CVE:CVE-2022-41558
CNNVD:CNNVD-202211-2861
TIBCO Software Spotfire Server是美国TIBCO Software公司的一套基于TIBCO Spotfire（数据分析和挖掘工具）的为企业提供整合、运行和管理的平台。
TIBCO Spotfire Analyst、TIBCO Spotfire Desktop和TIBCO Spotfire Server存在安全漏洞，该漏洞源于允许具有网络访问权的低权限攻击者在受影响系统上执行存储型跨站脚本(XSS)，成功利用该漏洞攻击者能够以受影响用户的权限执行命令。
solution:Upgrade tibco spotfire_analyst to a higher version than 11.4.4,11.5.0,11.6.0,11.7.0,11.8.0,12.0.0,12.0.1,12.1.0,and avoid the version (,11.4.4],11.5.0,11.6.0,11.7.0,11.8.0,12.0.0,12.0.1,12.1.0; Upgrade tibco spotfire_analytics_platform to a higher version than 12.1.0,and avoid the version (,12.1.0]; Upgrade tibco spotfire_desktop to a higher version than 11.4.4,11.5.0,11.6.0,11.7.0,11.8.0,12.0.0,12.0.1,12.1.0,and avoid the version (,11.4.4],11.5.0,11.6.0,11.7.0,11.8.0,12.0.0,12.0.1,12.1.0; Upgrade tibco spotfire_server to a higher version than 11.4.8,11.5.0,11.6.0,11.6.1,11.6.2,11.6.3,11.7.0,11.8.0,11.8.1,12.0.0,12.0.1,12.1.0,and avoid the version (,11.4.8],11.5.0,11.6.0,11.6.1,11.6.2,11.6.3,11.7.0,11.8.0,11.8.1,12.0.0,12.0.1,12.1.0