Unscored severity · published Sep 2, 2011
CVE-2011-3134
Unspecified vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1,…
–
CVSS
2.2%
EPSS
No
On KEV
Description
Unspecified vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to modify data or obtain sensitive information via a crafted URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Spotfire Analytics Server · Tibco
through 10.0.1; 10.0.0 · source: NVD
SS
Spotfire Server · Tibco
3.0.0; 3.0.1; 3.1.0; 3.1.1; 3.2.0; 3.3.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3134
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3134
Vendor Advisory
http://secunia.com/advisories/45864
www.securitytracker.com
http://www.securitytracker.com/id?1025999
Vendor Advisory
http://www.tibco.com/multimedia/spotfire_advisory_20110831_tcm8-14230.txt
Vendor Advisory
http://www.tibco.com/services/support/advisories/default.jsp
More from Spotfire Analytics Server
–
CVE-2012-0690
TIBCO Spotfire Web Application, Web Player Application, Automation Services Application, and Analytics Client Application in Spotfire Analytics Server before 10.1.2; Server before…
–
CVE-2011-3133
Session fixation vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before…
–
CVE-2011-3132
Cross-site scripting (XSS) vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server…