CVE-2015-4554 Other in n/a
Remote attackers can execute arbitrary code or obtain sensitive information in TIBCO Spotfire clients and web players via unspecified vectors.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not stated
- Fix
- None listed
What is CVE-2015-4554?
CVE-2015-4554 is a high-severity vulnerability in n/a, published on 21 Jul 2015. It can be exploited over the network.
Official description
Multiple unspecified vulnerabilities in TIBCO Spotfire Client and Spotfire Web Player Client in Spotfire Analyst before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; Spotfire Analytics Platform for AWS 6.5 and 7.0.x before 7.0.1; Spotfire Automation Services before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; Spotfire Deployment Kit before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; Spotfire Desktop before 6.5.2 and 7.0.x before 7.0.1; Spotfire Desktop Language Packs 7.0.x before 7.0.1; Spotfire Professional before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; Spotfire Web Player before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; and Silver Fabric Enabler for Spotfire Web Player before 2.1.1 allow remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors.
Which versions are affected by CVE-2015-4554?
It affects 9 products.
Products include Tibco Silver Fabric Enabler for Spotfire Webplayer, Tibco Spotfire Analyst, Tibco Spotfire Analytics Platform for Aws, Tibco Spotfire Automation Services, Tibco Spotfire Deployment Kit, Tibco Spotfire Desktop and 3 more.
How do I fix CVE-2015-4554?
No fix has been published for CVE-2015-4554 yet. Limit exposure of the affected software until one is available.
Is CVE-2015-4554 being exploited?
There is no known exploitation of CVE-2015-4554 in the wild and no public exploit code.
Sources
Also known as GHSA-vmxr-4rf6-8xp4.