CVE-2017-5527

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.92%

Published

May 9, 2017

Modified

May 12, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

TIBCO Spotfire Server 7.0.X before 7.0.2, 7.5.x before 7.5.1, 7.6.x before 7.6.1, 7.7.x before 7.7.1, and 7.8.x before 7.8.1 and Spotfire Analytics Platform for AWS Marketplace 7.8.0 and earlier contain multiple vulnerabilities which may allow authorized users to perform SQL injection attacks.

Weaknesses (CWE)

CWE-89

Affected Products (7)

tibco · spotfire_analytics_platform_for_awsvulnerable

tibco · spotfire_servervulnerable

References (4)

http://www.securityfocus.com/bid/98398

http://www.tibco.com/support/advisories/2017/05/tibco-security-advisory-may-9-2017-tibco-spotfire-server

Vendor Advisory

http://www.securityfocus.com/bid/98398

http://www.tibco.com/support/advisories/2017/05/tibco-security-advisory-may-9-2017-tibco-spotfire-server

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs