CVE-2020-9416

Name of the Vulnerable Software and Affected Versions TIBCO Spotfire Analyst versions 10.7.0 through 10.10.0 TIBCO Spotfire Analytics Platform for AWS Marketplace versions 10.7.0 through 10.10.1 TIBCO Spotfire Desktop versions 10.7.0 through 10.10.0 TIBCO Spotfire Server versions 10.7.0 through 10.10.1

Description The vulnerability in the Spotfire client component allows a legitimate user to inject scripts, which will be executed at the privileges of the victim if the victim is authenticated to the affected system.

Recommendations For TIBCO Spotfire Analyst versions 10.7.0 through 10.10.0, update to a version that contains a fix for this issue. For TIBCO Spotfire Analytics Platform for AWS Marketplace versions 10.7.0 through 10.10.1, update to a version that contains a fix for this issue. For TIBCO Spotfire Desktop versions 10.7.0 through 10.10.0, update to a version that contains a fix for this issue. For TIBCO Spotfire Server versions 10.7.0 through 10.10.1, update to a version that contains a fix for this issue.