{"id":"CVE-2013-2371","aliases":["EUVD-2013-2317","GHSA-cv78-mcm9-4pfh"],"status":"published","title":"The Web API in the Statistics Server in TIBCO Spotfire Statistics Services 3.3.x before 3.3.1, 4...","description":"The Web API in the Statistics Server in TIBCO Spotfire Statistics Services 3.3.x before 3.3.1, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 allows remote attackers to obtain sensitive information via an unspecified HTTP request.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02049,"percentile":0.81368,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2013-03-15T14:00:00Z","modified":"2026-06-16T23:53:13Z","products":[{"vendor":"tibco","product":"spotfire_statistics_services"}],"references":[{"url":"http://www.tibco.com/services/support/advisories/spotfire-advisory_20130313.jsp","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.tibco.com/mk/advisory.jsp","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.tibco.com/multimedia/spotfire-statistics-services-advisory-2013-03-12_tcm8-18479.txt","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2371"},{"url":"https://github.com/advisories/GHSA-cv78-mcm9-4pfh"}],"sources":{"cve":[{"id":"CVE-2013-2371","description":"The Web API in the Statistics Server in TIBCO Spotfire Statistics Services 3.3.x before 3.3.1, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 allows remote attackers to obtain sensitive information via an unspecified HTTP request.","status":"published","published":"2013-03-15T14:00:00Z","modified":"2024-09-17T03:07:24.638Z","updated_at":"2026-11-02T14:34:56.19172Z"}],"euvd":[{"id":"EUVD-2013-2317","description":"The Web API in the Statistics Server in TIBCO Spotfire Statistics Services 3.3.x before 3.3.1, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 allows remote attackers to obtain sensitive information via an unspecified HTTP request.","status":"published","published":"2013-03-15T14:00:00Z","modified":"2024-09-17T03:07:24Z","updated_at":"2026-11-03T00:28:34.673232Z"}],"ghsa":[{"id":"GHSA-cv78-mcm9-4pfh","title":"The Web API in the Statistics Server in TIBCO Spotfire Statistics Services 3.3.x before 3.3.1, 4...","description":"The Web API in the Statistics Server in TIBCO Spotfire Statistics Services 3.3.x before 3.3.1, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 allows remote attackers to obtain sensitive information via an unspecified HTTP request.","status":"published","published":"2022-05-17T05:13:39Z","modified":"2023-01-28T05:03:44Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:44:02.066384Z"}],"nvd":[{"id":"CVE-2013-2371","description":"The Web API in the Statistics Server in TIBCO Spotfire Statistics Services 3.3.x before 3.3.1, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 allows remote attackers to obtain sensitive information via an unspecified HTTP request.","status":"published","published":"2013-03-15T22:55:00.913Z","modified":"2026-06-16T23:53:13.047Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:24.091325Z"}]}}