{"id":"CVE-2014-5285","aliases":["EUVD-2014-5176","GHSA-hm6p-rhcp-2rrf"],"status":"published","title":"Unspecified vulnerability in the Authentication Module in TIBCO Spotfire Server before 4.5.2, 5.0...","description":"Unspecified vulnerability in the Authentication Module in TIBCO Spotfire Server before 4.5.2, 5.0.x before 5.0.3, 5.5.x before 5.5.2, 6.0.x before 6.0.3, and 6.5.x before 6.5.1 allows remote attackers to gain privileges, and obtain sensitive information or modify data, via unknown vectors.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02008,"percentile":0.80982,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2014-09-04T10:00:00Z","modified":"2026-06-17T00:11:20Z","products":[{"vendor":"tibco","product":"spotfire_server"}],"references":[{"url":"http://www.tibco.com/assets/bltdb348db4de625c6f/2014-006-Spotfire-advisory-cm-including3.X_v4.txt","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.tibco.com/mk/advisory.jsp","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-5285"},{"url":"https://github.com/advisories/GHSA-hm6p-rhcp-2rrf"}],"sources":{"cve":[{"id":"CVE-2014-5285","description":"Unspecified vulnerability in the Authentication Module in TIBCO Spotfire Server before 4.5.2, 5.0.x before 5.0.3, 5.5.x before 5.5.2, 6.0.x before 6.0.3, and 6.5.x before 6.5.1 allows remote attackers to gain privileges, and obtain sensitive information or modify data, via unknown vectors.","status":"published","published":"2014-09-04T10:00:00Z","modified":"2024-08-06T11:41:48.046Z","updated_at":"2026-11-02T14:33:42.219637Z"}],"euvd":[{"id":"EUVD-2014-5176","description":"Unspecified vulnerability in the Authentication Module in TIBCO Spotfire Server before 4.5.2, 5.0.x before 5.0.3, 5.5.x before 5.5.2, 6.0.x before 6.0.3, and 6.5.x before 6.5.1 allows remote attackers to gain privileges, and obtain sensitive information or modify data, via unknown vectors.","status":"published","published":"2014-09-04T10:00:00Z","modified":"2024-08-06T11:41:48Z","updated_at":"2026-11-03T01:57:03.789124Z"}],"ghsa":[{"id":"GHSA-hm6p-rhcp-2rrf","title":"Unspecified vulnerability in the Authentication Module in TIBCO Spotfire Server before 4.5.2, 5.0...","description":"Unspecified vulnerability in the Authentication Module in TIBCO Spotfire Server before 4.5.2, 5.0.x before 5.0.3, 5.5.x before 5.5.2, 6.0.x before 6.0.3, and 6.5.x before 6.5.1 allows remote attackers to gain privileges, and obtain sensitive information or modify data, via unknown vectors.","status":"published","published":"2022-05-17T04:37:54Z","modified":"2023-01-28T05:02:12Z","updated_at":"2026-11-02T14:43:44.023555Z"}],"nvd":[{"id":"CVE-2014-5285","description":"Unspecified vulnerability in the Authentication Module in TIBCO Spotfire Server before 4.5.2, 5.0.x before 5.0.3, 5.5.x before 5.5.2, 6.0.x before 6.0.3, and 6.5.x before 6.5.1 allows remote attackers to gain privileges, and obtain sensitive information or modify data, via unknown vectors.","status":"published","published":"2014-09-04T10:55:07.893Z","modified":"2026-06-17T00:11:20.09Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:02:55.540337Z"}]}}