CVE:CVE-2017-3181
CNNVD:CNNVD-201701-876
TIBCO Spotfire Analyst等都是美国TIBCO软件公司的产品。Spotfire Analyst是一套数据分析和挖掘平台；Spotfire Desktop是一套专为探索数据设计的分析软件。
多款TIBCO产品中存在多个SQL注入漏洞，该漏洞源于程序在使用SQL语句查询之前，没有正确的过滤用户提交的输入。远程攻击者可利用该漏洞控制应用程序，访问或修改数据或利用底层数据库中的潜在漏洞。以下产品和版本受到影响：TIBCO Spotfire Analyst 7.7.0版本；TIBCO Spotfire Connectors 7.6.0版本；TIBCO Spotfire Deployment Kit 7.7.0版本；TIBCO Spotfire Desktop 7.6.0，7.7.0版本；TIBCO Spotfire Desktop Developer Edition 7.7.0版本；TIBCO Spotfire Desktop Language Packs 7.6.0版本；TIBCO Spotfire Desktop Language Packs 7.7.0版本。
solution:Upgrade tibco spotfire_analyst to a higher version than 7.7.0,and avoid the version 7.7.0; Upgrade tibco spotfire_client to a higher version than -; Upgrade tibco spotfire_connectors to a higher version than 7.6.0,and avoid the version 7.6.0; Upgrade tibco spotfire_deployment_kit to a higher version than 7.7.0,and avoid the version 7.7.0; Upgrade tibco spotfire_desktop to a higher version than 7.6.0,7.7.0,and avoid the version 7.6.0,7.7.0; Upgrade tibco spotfire_desktop_language_packs to a higher version than 7.6.0,7.7.0,and avoid the version 7.6.0,7.7.0; Upgrade tibco spotfire_web_player_client to a higher version than -