CVE-2015-4554
Description
Multiple unspecified vulnerabilities in TIBCO Spotfire Client and Spotfire Web Player Client in Spotfire Analyst before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; Spotfire Analytics Platform for AWS 6.5 and 7.0.x before 7.0.1; Spotfire Automation Services before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; Spotfire Deployment Kit before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; Spotfire Desktop before 6.5.2 and 7.0.x before 7.0.1; Spotfire Desktop Language Packs 7.0.x before 7.0.1; Spotfire Professional before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; Spotfire Web Player before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; and Silver Fabric Enabler for Spotfire Web Player before 2.1.1 allow remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tibco spotfire_deployment_kit | v ≤ 5.5.1, 6.0.0, 6.0.1, 6.0.2, 6.5.0, 6.5.1, 6.5.2, 7.0.0 | — |
| tibco spotfire_professional | v ≤ 5.5.1, 6.0.0, 6.0.1, 6.0.2, 6.5.0, 6.5.1, 6.5.2, 7.0.0 | — |
| tibco spotfire_web_player | v ≤ 5.5.1, 6.0.0, 6.0.1, 6.0.2, 6.5.0, 6.5.1, 6.5.2, 7.0.0 | — |
| tibco spotfire_desktop | v ≤ 6.5.1, 7.0.0 | — |
| tibco spotfire_desktop_language_packs | 7.0.0 | — |
| tibco spotfire_automation_services | v ≤ 5.5.1, 6.0.0, 6.0.1, 6.0.2, 6.5.0, 6.5.1, 6.5.2, 7.0.0 | — |
| tibco spotfire_analyst | v ≤ 5.5.1, 6.0.0, 6.0.1, 6.0.2, 6.5.0, 6.5.1, 6.5.2, 7.0.0 | — |
| tibco silver_fabric_enabler_for_spotfire_webplayer | 2.1.0 | — |
| tibco spotfire_analytics_platform_for_aws | 6.5, 7.0.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.