CVEvulnerability

CVE-2017-5527

6.5 MEDIUM Published 2017-05-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-05-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
4.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 3.0 ([email protected])
6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-89

Description

TIBCO Spotfire Server 7.0.X before 7.0.2, 7.5.x before 7.5.1, 7.6.x before 7.6.1, 7.7.x before 7.7.1, and 7.8.x before 7.8.1 and Spotfire Analytics Platform for AWS Marketplace 7.8.0 and earlier contain multiple vulnerabilities which may allow authorized users to perform SQL injection attacks.

Affected configurations

• tibco spotfire analytics platform for aws (<= 7.8.0) • tibco spotfire server 7.0.0 • tibco spotfire server 7.0.1 • tibco spotfire server 7.5.0 • tibco spotfire server 7.6.0 • tibco spotfire server 7.7.0 • tibco spotfire server 7.8.0

Related

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References