Skip to content
CVE PROGRAM SOURCE RECORD7.6 High

CVE-2019-8987

TIBCO Spotfire Data Science Vulnerable to Persistent Cross-Site Scripting

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
tibco

Description

The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a persistent cross-site scripting vulnerability that theoretically allows an authenticated user to gain access to all the capabilities of the web interface available to more privileged users. Affected releases are TIBCO Software Inc.'s TIBCO Data Science for AWS: versions up to and including 6.4.0, and TIBCO Spotfire Data Science: versions up to and including 6.4.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TIBCO Software Inc. TIBCO Data Science for AWS

  • unspecified to ≤ 6.4.0affected

TIBCO Software Inc. TIBCO Spotfire Data Science

  • unspecified to ≤ 6.4.0affected

References