[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fnHmv-T869a-BJSWItdn3JBcQ9oInQwRVK4T0dzbniO4":3,"g5a-risk:CVE-2023-26221":133},{"success":4,"data":5,"meta":130},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":64,"references":65,"referencesCount":71,"weaknesses":72,"weaknessesCount":71,"isActivelyExploited":81,"cisaInfo":26,"otxData":26,"relatedBlogPosts":82,"seoMetadata":83,"configurations":108,"relatedVendorCves":128,"notableEvents":129},"CVE-2023-26221","What is CVE-2023-26221?","The Spotfire Connectors component of TIBCO Software Inc.'s Spotfire Analyst, Spotfire Server, and Spotfire for AWS Marketplace contains an easily exploitable vulnerability that allows a low privileged attacker with read\u002Fwrite access to craft malicious Analyst files. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s Spotfire Analyst: versions 12.3.0, 12.4.0, and 12.5.0, Spotfire Server: versions 12.3.0, 12.4.0, and 12.5.0, and Spotfire for AWS Marketplace: version 12.5.0.","The Spotfire Connectors component of TIBCO Software Inc.'s Spotfire Analyst, Spotfire Server, and Spotfire for AWS Marketplace contains an easily exploitable...","2023-11-08T20:15:07.313","2023-11-16T17:37:34.827",3.9,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","REQUIRED","UNCHANGED","NONE",null,1.3,2.5,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":37,"ImpactScore":38},"security@tibco.com","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":25,"UserInteraction":23,"Scope":34,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":25,"BaseScore":35,"BaseSeverity":36,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","CHANGED",5,"MEDIUM",1.8,2.7,0.00186,[39,39,39,39,39,39,39],"Low",[43,48,51,54,57,60,62],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"tibco","spotfire_analyst","12.3.0","cpe:2.3:a:tibco:spotfire_analyst:12.3.0:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":49,"criteria":50,"vulnerable":4},"12.4.0","cpe:2.3:a:tibco:spotfire_analyst:12.4.0:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":52,"criteria":53,"vulnerable":4},"12.5.0","cpe:2.3:a:tibco:spotfire_analyst:12.5.0:*:*:*:*:*:*:*",{"vendor":44,"product":55,"version":52,"criteria":56,"vulnerable":4},"spotfire_analytics_platform","cpe:2.3:a:tibco:spotfire_analytics_platform:12.5.0:*:*:*:*:aws_marketplace:*:*",{"vendor":44,"product":58,"version":46,"criteria":59,"vulnerable":4},"spotfire_server","cpe:2.3:a:tibco:spotfire_server:12.3.0:*:*:*:*:*:*:*",{"vendor":44,"product":58,"version":49,"criteria":61,"vulnerable":4},"cpe:2.3:a:tibco:spotfire_server:12.4.0:*:*:*:*:*:*:*",{"vendor":44,"product":58,"version":52,"criteria":63,"vulnerable":4},"cpe:2.3:a:tibco:spotfire_server:12.5.0:*:*:*:*:*:*:*",7,[66],{"url":67,"source":68,"tags":69},"https:\u002F\u002Fwww.tibco.com\u002Fservices\u002Fsupport\u002Fadvisories","Tibco",[70],"Vendor Advisory",1,[73],{"id":74,"name":75,"description":76,"extendedDescription":77,"status":78,"abstraction":79,"structure":80},"CWE-522","Insufficiently Protected Credentials","The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and\u002For retrieval.","","Incomplete","Class","Simple",false,[],{"title":84,"metaDescription":85,"keywords":86,"canonicalUrl":87,"structuredData":88},"What is CVE-2023-26221? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-26221, a low severity cyber security vulnerability from 2023. The Spotfire Connectors component of TIBCO Software Inc.'s S...","CVE-2023-26221, CVE-2023-26221 vulnerability, CVE-2023-26221 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, tibco security, spotfire_analyst vulnerability, spotfire_analytics_platform vulnerability, spotfire_server vulnerability","\u002Fwhat-is\u002Fcve-2023-26221",{"@context":89,"@type":90,"headline":84,"description":85,"datePublished":10,"dateModified":11,"author":91,"publisher":95,"about":99,"mainEntityOfPage":103,"articleSection":106,"keywords":107},"https:\u002F\u002Fschema.org","TechArticle",{"@type":92,"name":93,"url":94},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":92,"name":93,"url":94,"logo":96},{"@type":97,"url":98},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":100,"name":6,"description":101,"additionalType":102},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":104,"@id":105},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-26221","Cybersecurity","CVE-2023-26221, CVE-2023-26221 vulnerability, CVE-2023-26221 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[109],{"Operator":26,"Negate":26,"Nodes":110},[111],{"Operator":112,"Negate":26,"CPEMatch":113},"OR",[114,116,118,120,122,124,126],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":115,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"949054A7-A299-4C11-9E2B-7437D6C4D801",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":117,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C63E85E6-8519-4957-B55B-0B8F6E658B2B",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":119,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"FE433F55-79E4-438C-81C7-4CEEAEE1C442",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":121,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"55B9367D-3938-4059-BABE-72322C2AE10C",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":123,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"0F7F5C30-950E-4483-8795-761C506BB549",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":125,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"4B67F529-EB21-4628-ADA2-56E76DA272EB",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":127,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"889EE133-0CEE-429F-A58E-1F310FB981B8",[],[],{"lastModified":11,"cacheTime":131,"version":132},1792372915767,"2.0",{"score":134,"band":135,"action":136,"scoredAt":137},18,"Info","Track","2026-10-16T06:59:45.67021+00:00"]