title: TIBCO Spotfire injection vulnerabilities
description: TIBCO Spotfire Server 7.0.X before 7.0.2, 7.5.x before 7.5.1, 7.6.x before 7.6.1, 7.7.x before 7.7.1, and 7.8.x before 7.8.1 and Spotfire Analytics Platform for AWS Marketplace 7.8.0 and earlier contain multiple vulnerabilities which may allow authorized users to perform SQL injection attacks.
problem types: SQL injection attack
affected:
{
product: TIBCO Spotfire Server
vendor: TIBCO Software Inc.
versions:
status: affected, version: 7.0.0
status: affected, version: 7.0.1
status: affected, version: 7.5.0
status: affected, version: 7.6.0
status: affected, version: 7.7.0
status: affected, version: 7.8.0
}
{
product: TIBCO Spotfire Analytics Platform for AWS Marketplace
vendor: TIBCO Software Inc.
versions:
status: affected, version: 7.8.0
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N
version: 3.0
]