6.8
CVSSv3

CVE-2021-43051

Published: 14/12/2021 Updated: 12/07/2022
CVSS v2 Base Score: 8.5 | Impact Score: 10 | Exploitability Score: 6.8
CVSS v3 Base Score: 6.8 | Impact Score: 5.9 | Exploitability Score: 0.9
VMScore: 756
Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C

Vulnerability Summary

The Spotfire Server component of TIBCO Software Inc.'s TIBCO Spotfire Server, TIBCO Spotfire Server, and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows malicious custom API clients with network access to execute internal API operations outside of the scope of those granted to it. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Server: versions 10.10.6 and below, TIBCO Spotfire Server: versions 11.0.0, 11.1.0, 11.2.0, 11.3.0, 11.4.0, and 11.4.1, and TIBCO Spotfire Server: versions 11.5.0 and 11.6.0.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

tibco spotfire server 11.1.0

tibco spotfire server 11.0.0

tibco spotfire server 11.2.0

tibco spotfire server 11.3.0

tibco spotfire server 11.4.0

tibco spotfire server 11.4.1

tibco spotfire server 11.5.0

tibco spotfire server 11.6.0

tibco spotfire server