Cross-site scripting (XSS) vulnerability in the Engine in TIBCO Spotfire Web Player 3.3.x prior to 3.3.3, 4.0.x prior to 4.0.3, 4.5.x prior to 4.5.1, and 5.0.x prior to 5.0.1 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
tibco spotfire web player 3.3 |
||
tibco spotfire web player 3.3.2 |
||
tibco spotfire web player 4.0 |
||
tibco spotfire web player 4.0.1 |
||
tibco spotfire web player 4.0.2 |
||
tibco spotfire web player 4.5.0 |
||
tibco spotfire web player 5.0.0 |