CVEvulnerability
CVE-2014-2544
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-04-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Unspecified vulnerability in Spotfire Web Player Engine, Spotfire Desktop, and Spotfire Server Authentication Module in TIBCO Spotfire Server 3.3.x before 3.3.4, 4.5.x before 4.5.1, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.2; Spotfire Professional 4.0.x before 4.0.4, 4.5.x before 4.5.2, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.1; Spotfire Web Player 4.0.x before 4.0.4, 4.5.x before 4.5.2, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.1; Spotfire Automation Services 4.0.x before 4.0.4, 4.5.x before 4.5.2, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.1; Spotfire Deployment Kit 4.0.x before 4.0.4, 4.5.x before 4.5.2, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.1; Spotfire Desktop 6.x before 6.0.1; and Spotfire Analyst 6.x before 6.0.1 allows remote attackers to execute arbitrary code via unknown vectors.
Affected configurations
• tibco web player (<= 4.0.3)
• tibco web player 4.5.0
• tibco web player 4.5.1
• tibco web player 5.0.0
• tibco web player 5.0.1
• tibco web player 5.5.0
• tibco web player 6.0.0
• tibco automation services (<= 4.0.3)
• tibco automation services 4.5.0
• tibco automation services 4.5.1
• tibco automation services 5.0.0
• tibco automation services 5.0.1
• tibco automation services 5.5.0
• tibco automation services 6.0.0
• tibco spotfire server (<= 3.3.3)
• tibco spotfire server 4.5.0
• tibco spotfire server 5.0.0
• tibco spotfire server 5.0.1
• tibco spotfire server 5.5.0
• tibco spotfire server 6.0.0
• tibco spotfire server 6.0.1
• tibco spotfire professional (<= 4.0.3)
• tibco spotfire professional 4.5.0
• tibco spotfire professional 4.5.1
• tibco spotfire professional 5.0.0
• tibco spotfire professional 5.0.1
• tibco spotfire professional 5.5.0
• tibco spotfire professional 6.0.0
• tibco analyst (<= 6.0.0)
• tibco desktop (<= 6.0.0)
• tibco deployment kit (<= 4.0.3)
• tibco deployment kit 4.5.0
• tibco deployment kit 4.5.1
• tibco deployment kit 5.0.0
• tibco deployment kit 5.0.1
• tibco deployment kit 5.5.0
• tibco deployment kit 6.0.0
References
- http://www.tibco.com/mk/advisory.jsp Vendor Advisory
- http://www.tibco.com/multimedia/spotfire_advisory_20140409_tcm8-20764.txt Vendor Advisory
- http://www.tibco.com/mk/advisory.jsp Vendor Advisory
- http://www.tibco.com/multimedia/spotfire_advisory_20140409_tcm8-20764.txt Vendor Advisory