Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-29268

TIBCO Spotfire Statistics Services Unrestricted File Upload Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
tibco

Description

The Splus Server component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that allows an unauthenticated remote attacker to upload or modify arbitrary files within the web server directory on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Statistics Services: versions 11.4.10 and below, versions 11.5.0, 11.6.0, 11.6.1, 11.6.2, 11.7.0, 11.8.0, 11.8.1, 12.0.0, 12.0.1, and 12.0.2, versions 12.1.0 and 12.2.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TIBCO Software Inc. TIBCO Spotfire Statistics Services

Default version status: unknown

  • 0 to ≤ 11.4.10affected
  • 11.5.0affected
  • 11.6.0affected
  • 11.6.1affected
  • 11.6.2affected
  • 11.7.0affected
  • 11.8.0affected
  • 11.8.1affected
  • 12.0.0affected
  • 12.0.1affected
  • 12.0.2affected
  • 12.1.0affected
  • 12.2.0affected

References