TIBCO Spotfire Connectors vulnerabilities

2 CVEs affecting TIBCO Spotfire Connectors, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-3181, published 2018-07-24.

More from TIBCO.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-3181, published 2018-07-24. Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days. Multiple TIBCO Products are prone to multiple unspecified SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query. Exploiting these…
• CVE-2017-3180, published 2018-07-24. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple TIBCO Products are prone to multiple unspecified cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to…