Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-17295 State: PUBLISHED Published: 2019-10-07T15:05:43 Last Updated: 2024-08-05T01:33:17.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the history function by a Regular user. Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-022/
CVE ID: CVE-2019-17296 State: PUBLISHED Published: 2019-10-07T15:05:35 Last Updated: 2024-08-05T01:33:17.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Contacts module by a Regular user. Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-023/
CVE ID: CVE-2019-17297 State: PUBLISHED Published: 2019-10-07T15:05:24 Last Updated: 2024-08-05T01:33:17.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Quotes module by a Regular user. Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-024/
CVE ID: CVE-2019-17298 State: PUBLISHED Published: 2019-10-07T15:05:16 Last Updated: 2024-08-05T01:33:17.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Administration module by a Developer user. Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-025/
CVE ID: CVE-2019-17299 State: PUBLISHED Published: 2019-10-07T15:05:07 Last Updated: 2024-08-05T01:33:17.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Administration module by an Admin user. Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-026/
CVE ID: CVE-2019-17300 State: PUBLISHED Published: 2019-10-07T15:04:58 Last Updated: 2024-08-05T01:33:17.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Administration module by a Developer user. Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-027/
CVE ID: CVE-2019-17301 State: PUBLISHED Published: 2019-10-07T15:04:50 Last Updated: 2024-08-05T01:33:17.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by an Admin user. Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-028/
CVE ID: CVE-2019-17302 State: PUBLISHED Published: 2019-10-07T15:04:42 Last Updated: 2024-08-05T01:33:17.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by a Developer user. Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-029/
CVE ID: CVE-2019-17303 State: PUBLISHED Published: 2019-10-07T15:04:34 Last Updated: 2024-08-05T01:33:17.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Developer user. Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-030/
CVE ID: CVE-2019-17304 State: PUBLISHED Published: 2019-10-07T15:04:24 Last Updated: 2024-08-05T01:33:17.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by an Admin user. Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-031/
CVE ID: CVE-2019-17305 State: PUBLISHED Published: 2019-10-07T15:04:14 Last Updated: 2024-08-05T01:33:17.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Regular user. Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-032/
CVE ID: CVE-2019-17306 State: PUBLISHED Published: 2019-10-07T15:04:06 Last Updated: 2024-08-05T01:33:17.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Configurator module by an Admin user. Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-033/
CVE ID: CVE-2019-17307 State: PUBLISHED Published: 2019-10-07T15:03:58 Last Updated: 2024-08-05T01:33:17.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Tracker module by an Admin user. Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-034/
CVE ID: CVE-2019-17308 State: PUBLISHED Published: 2019-10-07T15:03:50 Last Updated: 2024-08-05T01:33:17.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Emails module by a Regular user. Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-035/
CVE ID: CVE-2019-17309 State: PUBLISHED Published: 2019-10-07T15:03:41 Last Updated: 2024-08-05T01:33:17.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the EmailMan module by an Admin user. Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-036/
CVE ID: CVE-2019-17310 State: PUBLISHED Published: 2019-10-07T15:03:30 Last Updated: 2024-08-05T01:33:17.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Campaigns module by an Admin user. Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-037/
CVE ID: CVE-2019-17311 State: PUBLISHED Published: 2019-10-07T15:03:20 Last Updated: 2024-08-05T01:33:17.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the attachment function by a Regular user. Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-038/
CVE ID: CVE-2019-17312 State: PUBLISHED Published: 2019-10-07T15:03:12 Last Updated: 2024-08-05T01:33:17.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the file function by a Regular user. Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-039/
CVE ID: CVE-2019-17313 State: PUBLISHED Published: 2019-10-07T15:03:00 Last Updated: 2024-08-05T01:33:17.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the Studio module by a Developer user. Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-040/
CVE ID: CVE-2019-17314 State: PUBLISHED Published: 2019-10-07T15:01:07 Last Updated: 2024-08-05T01:33:17.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the Configurator module by an Admin user. Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-041/
CVE ID: CVE-2019-17315 State: PUBLISHED Published: 2019-10-07T15:00:58 Last Updated: 2024-08-05T01:40:14.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP object injection in the Administration module by an Admin user. Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-042/
CVE ID: CVE-2019-17316 State: PUBLISHED Published: 2019-10-07T15:00:44 Last Updated: 2024-08-05T01:40:14.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP object injection in the Import module by a Regular user. Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-043/
CVE ID: CVE-2019-17317 State: PUBLISHED Published: 2019-10-07T15:00:14 Last Updated: 2024-08-05T01:40:14.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP object injection in the UpgradeWizard module by an Admin user. Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-044/
CVE ID: CVE-2019-17318 State: PUBLISHED Published: 2019-10-07T14:56:00 Last Updated: 2024-08-05T01:40:14.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmse_Inbox module by a Regular user. Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-046/
CVE ID: CVE-2019-17319 State: PUBLISHED Published: 2019-10-07T14:55:50 Last Updated: 2024-08-05T01:40:14.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Emails module by a Regular user. Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-047/
CVE ID: CVE-2019-17320 State: PUBLISHED Published: 2019-10-10T14:45:24 Last Updated: 2024-08-05T01:40:14.941Z Vendors: NetSarang Products: XFTP Problem Types: CWE-119 Description: NetSarang XFTP Client 6.0149 and earlier version contains a buffer overflow vulnerability caused by improper boundary checks when copying file name from an attacker controlled FTP server. That leads attacker to execute arbitrary code by sending a crafted filename. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35160
CVE ID: CVE-2019-17321 State: PUBLISHED Published: 2019-10-30T20:42:57 Last Updated: 2024-08-05T01:40:14.489Z Vendors: ClipSoft Products: REXPERT Problem Types: CWE-200 Description: ClipSoft REXPERT 1.0.0.527 and earlier version have an information disclosure issue. When requesting web page associated with session, could leak username via session file path of HTTP response data. No authentication is required. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35184
CVE ID: CVE-2019-17322 State: PUBLISHED Published: 2019-10-30T20:46:38 Last Updated: 2024-08-05T01:40:14.475Z Vendors: ClipSoft Products: REXPERT Problem Types: CWE-264 Description: ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation via a POST request with the parameter set to the file path to be written. This can be an executable file that is written to in the arbitrary directory. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35184
CVE ID: CVE-2019-17323 State: PUBLISHED Published: 2019-10-30T20:49:41 Last Updated: 2024-08-05T01:40:14.439Z Vendors: ClipSoft Products: REXPERT Problem Types: CWE-91 Description: ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via report print function of rexpert viewer with modified XML document. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35184
CVE ID: CVE-2019-17324 State: PUBLISHED Published: 2019-10-30T20:52:34 Last Updated: 2024-08-05T01:40:14.434Z Vendors: ClipSoft Products: REXPERT Problem Types: CWE-22 Description: ClipSoft REXPERT 1.0.0.527 and earlier version allows directory traversal by issuing a special HTTP POST request with ../ characters. This could lead to create malicious HTML file, because they can inject a content with crafted template. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35184
CVE ID: CVE-2019-17325 State: PUBLISHED Published: 2019-10-30T20:55:11 Last Updated: 2024-08-05T01:40:14.045Z Vendors: ClipSoft Products: REXPERT Problem Types: CWE-434 Description: ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to upload arbitrary local file via the ActiveX method in RexViewerCtrl30.ocx. That could lead to disclosure of sensitive information. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35184
CVE ID: CVE-2019-17326 State: PUBLISHED Published: 2019-10-30T20:57:30 Last Updated: 2024-08-05T01:40:14.450Z Vendors: ClipSoft Products: REXPERT Problem Types: CWE-264 Description: ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to arbitrary file deletion by issuing a HTTP GET request with a specially crafted parameter. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35184
CVE ID: CVE-2019-17327 State: PUBLISHED Published: 2019-11-08T17:54:05 Last Updated: 2024-08-05T01:40:14.453Z Vendors: TmaxSoft Products: JEUS Problem Types: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: JEUS 7 Fix#0~5 and JEUS 8Fix#0~1 versions contains a directory traversal vulnerability caused by improper input parameter check when uploading installation file in administration web page. That leads remote attacker to execute arbitrary code via uploaded file. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35197
CVE ID: CVE-2019-17330 State: PUBLISHED Published: 2019-11-12T19:15:56.379450Z Last Updated: 2024-09-16T20:16:20.848Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO EBX Problem Types: The impact of these vulnerabilities includes the theoretical possibility that an attacker could gain full administrative access to the web interface of the affected component. Description: The Web server component of TIBCO Software Inc.'s TIBCO EBX contains multiple vulnerabilities that theoretically allow authenticated users to perform stored cross-site scripting (XSS) attacks, and unauthenticated users to perform reflected cross-site scripti
to perform stored cross-site scripting (XSS) attacks, and unauthenticated users to perform reflected cross-site scripting attacks. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions up to and including 5.8.1.fixR, versions 5.9.3, 5.9.4, 5.9.5, and 5.9.6. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/11/tibco-security-advisory-november-12-2019-tibco-ebx-2019-17330
CVE ID: CVE-2019-17331 State: PUBLISHED Published: 2019-11-12T19:15:56.812820Z Last Updated: 2024-09-17T00:11:11.551Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: TIBCO Software Inc. Products: TIBCO EBX Add-ons Problem Types: The impact of this vulnerability includes the theoretical possibility that an attacker could gain full administrative access to the web interface of the affected component. Description: The Data Exchange Web Interface component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s
ws authenticated users to perform stored cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions up to and including 3.20.13, version 4.1.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/11/tibco-security-advisory-november-12-2019-tibco-ebx-add-on-2019-17331
CVE ID: CVE-2019-17332 State: PUBLISHED Published: 2019-11-12T19:15:57.352831Z Last Updated: 2024-09-16T20:37:36.265Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: TIBCO Software Inc. Products: TIBCO EBX Add-ons Problem Types: The impact of this vulnerability includes the theoretical possibility that an attacker could gain full administrative access to the web interface of the affected component. Description: The Digital Asset Manager Web Interface component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting (XSS) attacks. Affected releases are TIBCO Softwar
lly allows authenticated users to perform stored cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions up to and including 3.20.13, versions 4.1.0, 4.2.0, 4.2.1, and 4.2.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/11/tibco-security-advisory-november-12-2019-tibco-ebx-add-on-2019-17332
CVE ID: CVE-2019-17333 State: PUBLISHED Published: 2020-02-19T18:20:19.016640Z Last Updated: 2024-09-17T03:52:40.294Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO EBX Problem Types: The impact of these vulnerabilities includes the theoretical possibility that an attacker could gain full administrative access to the web interface of the affected component. Description: The Web server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.8.1.fixS
m stored cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.8.1.fixS and below, versions 5.9.3, 5.9.4, 5.9.5, 5.9.6, and 5.9.7. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2020/02/tibco-security-advisory-february-19-2020-tibco-ebx
CVE ID: CVE-2019-17334 State: PUBLISHED Published: 2019-12-17T20:55:17.037330Z Last Updated: 2024-09-16T18:39:10.409Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:A/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, TIBCO Spotfire Desktop Language Packs Problem Types: The impact of this vulnerability includes the theoretical possibility that the attacker gains full control of the user account that accesses affected system. Description: The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform fo
tion: The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfire Desktop Language Packs contains a vulnerability that theoretically allows an attacker with permission to write DXP files to the Spotfire library to remotely execute code of their choice on the user account of other users who access the affected system. This attack is a risk only when the attacker has write access to a network file system shared with the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analyst: versions 7.11.1 and below, versions 7.12.0, 7.
stem. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analyst: versions 7.11.1 and below, versions 7.12.0, 7.13.0, 7.14.0, 10.0.0, 10.1.0, 10.2.0, 10.3.0, 10.3.1, and 10.3.2, versions 10.4.0, 10.5.0, and 10.6.0, TIBCO Spotfire Analytics Platform for AWS Marketplace: version 10.6.0, TIBCO Spotfire Deployment Kit: versions 7.11.1 and below, TIBCO Spotfire Desktop: versions 7.11.1 and below, versions 7.12.0, 7.13.0, 7.14.0, 10.0.0, 10.1.0, 10.2.0, 10.3.0, 10.3.1, and 10.3.2, versions 10.4.0, 10.5.0, and 10.6.0, and TIBCO Spotfire Desktop Language Packs: versions 7.11.1 and below. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/ad
1.1 and below. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/12/tibco-security-advisory-december-17-2019-tibco-spotfire-2019-17334
CVE ID: CVE-2019-17335 State: PUBLISHED Published: 2019-12-17T20:55:17.568949Z Last Updated: 2024-09-16T20:58:01.616Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: TIBCO Software Inc. Products: TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Server Problem Types: The impact of this vulnerability includes the theoretical possibility that the attacker could gain unauthorized access to data that other users have recently viewed. Description: The Data access layer component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains multiple vulnerabilities that theoretically allow an
cs Platform for AWS Marketplace and TIBCO Spotfire Server contains multiple vulnerabilities that theoretically allow an attacker access to data cached from a data source, or a portion of a data source, that the attacker should not have access to. The attacker would need privileges to save a Spotfire file to the library. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: version 10.6.0 and TIBCO Spotfire Server: versions 7.11.7 and below, versions 7.12.0, 7.13.0, 7.14.0, 10.0.0, 10.0.1, 10.1.0, 10.2.0, 10.2.1, 10.3.0, 10.3.1, 10.3.2, 10.3.3, and 10.3.4, versions 10.4.0, 10.5.0, and 10.6.0. Additional Analyst Notes: - CVE Program Container: Refer
0.3.2, 10.3.3, and 10.3.4, versions 10.4.0, 10.5.0, and 10.6.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/12/tibco-security-advisory-december-17-2019-tibco-spotfire-2019-17335