CVE-2017-5527: TIBCO Spotfire injection vulnerabilities
TIBCO Spotfire Server 7.0.X before 7.0.2, 7.5.x before 7.5.1, 7.6.x before 7.6.1, 7.7.x before 7.7.1, and 7.8.x before 7.8.1 and Spotfire Analytics Platform for AWS Marketplace 7.8.0 and earlier contain multiple vulnerabilities which may allow authorized users to perform SQL injection attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-5527?
CVE-2017-5527 has been classified with a moderate severity level due to the potential for SQL injection attacks.
How do I fix CVE-2017-5527?
To fix CVE-2017-5527, upgrade to TIBCO Spotfire Server version 7.0.2 or higher, or to any of the patched versions in the 7.5.x, 7.6.x, 7.7.x, or 7.8.x series.
Who is affected by CVE-2017-5527?
CVE-2017-5527 affects TIBCO Spotfire Server versions 7.0.X through 7.8.0 and Spotfire Analytics Platform for AWS Marketplace 7.8.0 and earlier.
What types of attacks can CVE-2017-5527 enable?
CVE-2017-5527 may allow authorized users to perform SQL injection attacks, potentially compromising database security.
Is there a known exploit for CVE-2017-5527?
While there are no specific public exploits reported for CVE-2017-5527, the vulnerability allows for severe risks associated with SQL injection.