CVEvulnerability
CVE-2015-4554
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-07-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple unspecified vulnerabilities in TIBCO Spotfire Client and Spotfire Web Player Client in Spotfire Analyst before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; Spotfire Analytics Platform for AWS 6.5 and 7.0.x before 7.0.1; Spotfire Automation Services before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; Spotfire Deployment Kit before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; Spotfire Desktop before 6.5.2 and 7.0.x before 7.0.1; Spotfire Desktop Language Packs 7.0.x before 7.0.1; Spotfire Professional before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; Spotfire Web Player before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; and Silver Fabric Enabler for Spotfire Web Player before 2.1.1 allow remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors.
Affected configurations
• tibco spotfire deployment kit (<= 5.5.1)
• tibco spotfire deployment kit 6.0.0
• tibco spotfire deployment kit 6.0.1
• tibco spotfire deployment kit 6.0.2
• tibco spotfire deployment kit 6.5.0
• tibco spotfire deployment kit 6.5.1
• tibco spotfire deployment kit 6.5.2
• tibco spotfire deployment kit 7.0.0
• tibco spotfire professional (<= 5.5.1)
• tibco spotfire professional 6.0.0
• tibco spotfire professional 6.0.1
• tibco spotfire professional 6.0.2
• tibco spotfire professional 6.5.0
• tibco spotfire professional 6.5.1
• tibco spotfire professional 6.5.2
• tibco spotfire professional 7.0.0
• tibco spotfire web player (<= 5.5.1)
• tibco spotfire web player 6.0.0
• tibco spotfire web player 6.0.1
• tibco spotfire web player 6.0.2
• tibco spotfire web player 6.5.0
• tibco spotfire web player 6.5.1
• tibco spotfire web player 6.5.2
• tibco spotfire web player 7.0.0
• tibco spotfire desktop (<= 6.5.1)
• tibco spotfire desktop 7.0.0
• tibco spotfire desktop language packs 7.0.0
• tibco spotfire automation services (<= 5.5.1)
• tibco spotfire automation services 6.0.0
• tibco spotfire automation services 6.0.1
• tibco spotfire automation services 6.0.2
• tibco spotfire automation services 6.5.0
• tibco spotfire automation services 6.5.1
• tibco spotfire automation services 6.5.2
• tibco spotfire automation services 7.0.0
• tibco spotfire analyst (<= 5.5.1)
• tibco spotfire analyst 6.0.0
• tibco spotfire analyst 6.0.1
• tibco spotfire analyst 6.0.2
• tibco spotfire analyst 6.5.0
• tibco spotfire analyst 6.5.1
• tibco spotfire analyst 6.5.2
• tibco spotfire analyst 7.0.0
• tibco silver fabric enabler for spotfire webplayer 2.1.0
• tibco spotfire analytics platform for aws 6.5
• tibco spotfire analytics platform for aws 7.0.0
References
- http://www.securitytracker.com/id/1033015 www.securitytracker.com
- http://www.tibco.com/assets/blt1fd126faba191a9f/2015-001-advisory.txt Vendor Advisory
- http://www.tibco.com/mk/advisory.jsp Vendor Advisory
- http://www.securitytracker.com/id/1033015 www.securitytracker.com
- http://www.tibco.com/assets/blt1fd126faba191a9f/2015-001-advisory.txt Vendor Advisory
- http://www.tibco.com/mk/advisory.jsp Vendor Advisory