Unscored severity · published Apr 10, 2014
CVE-2014-2544
Unspecified vulnerability in Spotfire Web Player Engine, Spotfire Desktop, and Spotfire Server Authentication Module in TIBCO Spotfire Server 3.3.x before 3.3.4, 4.5.x before…
–
CVSS
3.1%
EPSS
No
On KEV
Description
Unspecified vulnerability in Spotfire Web Player Engine, Spotfire Desktop, and Spotfire Server Authentication Module in TIBCO Spotfire Server 3.3.x before 3.3.4, 4.5.x before 4.5.1, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.2; Spotfire Professional 4.0.x before 4.0.4, 4.5.x before 4.5.2, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.1; Spotfire Web Player 4.0.x before 4.0.4, 4.5.x before 4.5.2, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.1; Spotfire Automation Services 4.0.x before 4.0.4, 4.5.x before 4.5.2, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.1; Spotfire Deployment Kit 4.0.x before 4.0.4, 4.5.x before 4.5.2, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.1; Spotfire Desktop 6.x before 6.0.1; and Spotfire Analyst 6.x before 6.0.1 allows remote attackers to execute arbitrary code via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Analyst · Tibco
through 6.0.0 · source: NVD
AS
Automation Services · Tibco
through 4.0.3; 4.5.0; 4.5.1; 5.0.0; 5.0.1; 5.5.0; +1 more · source: NVD
DK
Deployment Kit · Tibco
through 4.0.3; 4.5.0; 4.5.1; 5.0.0; 5.0.1; 5.5.0; +1 more · source: NVD
DE
Desktop · Tibco
through 6.0.0 · source: NVD
SP
Spotfire Professional · Tibco
through 4.0.3; 4.5.0; 4.5.1; 5.0.0; 5.0.1; 5.5.0; +1 more · source: NVD
SS
Spotfire Server · Tibco
through 3.3.3; 4.5.0; 5.0.0; 5.0.1; 5.5.0; 6.0.0; +1 more · source: NVD
WP
Web Player · Tibco
through 4.0.3; 4.5.0; 4.5.1; 5.0.0; 5.0.1; 5.5.0; +1 more · source: NVD