{"id":"CVE-2011-3134","aliases":["EUVD-2011-3102","GHSA-h22m-ch2c-256j"],"status":"published","title":"Unspecified vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x...","description":"Unspecified vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to modify data or obtain sensitive information via a crafted URL.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02201,"percentile":0.82645,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2011-09-02T16:00:00Z","modified":"2026-06-16T23:32:43Z","products":[{"vendor":"tibco","product":"spotfire_analytics_server"},{"vendor":"tibco","product":"spotfire_server"}],"references":[{"url":"http://www.tibco.com/services/support/advisories/default.jsp","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1025999","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://secunia.com/advisories/45864","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.tibco.com/multimedia/spotfire_advisory_20110831_tcm8-14230.txt","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3134"},{"url":"https://github.com/advisories/GHSA-h22m-ch2c-256j"}],"sources":{"cve":[{"id":"CVE-2011-3134","description":"Unspecified vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to modify data or obtain sensitive information via a crafted URL.","status":"published","published":"2011-09-02T16:00:00Z","modified":"2024-08-06T23:22:27.593Z","updated_at":"2026-11-02T14:35:37.324501Z"}],"euvd":[{"id":"EUVD-2011-3102","description":"Unspecified vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to modify data or obtain sensitive information via a crafted URL.","status":"published","published":"2011-09-02T16:00:00Z","modified":"2024-08-06T23:22:27Z","updated_at":"2026-11-03T01:39:53.115277Z"}],"ghsa":[{"id":"GHSA-h22m-ch2c-256j","title":"Unspecified vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x...","description":"Unspecified vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to modify data or obtain sensitive information via a crafted URL.","status":"published","published":"2022-05-17T05:38:52Z","modified":"2023-01-28T05:04:41Z","updated_at":"2026-11-02T14:44:13.169568Z"}],"nvd":[{"id":"CVE-2011-3134","description":"Unspecified vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to modify data or obtain sensitive information via a crafted URL.","status":"published","published":"2011-09-02T16:55:06.85Z","modified":"2026-06-16T23:32:43.643Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:02:09.988332Z"}]}}