CVE-2011-3132

Cross-site scripting (XSS) vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

• CWE-79

• http://secunia.com/advisories/45864Vendor Advisory
• http://www.securitytracker.com/id?1025999
• http://www.tibco.com/multimedia/spotfire_advisory_20110831_tcm8-14230.txtVendor Advisory
• http://www.tibco.com/services/support/advisories/default.jspVendor Advisory
• http://secunia.com/advisories/45864Vendor Advisory
• http://www.securitytracker.com/id?1025999
• http://www.tibco.com/multimedia/spotfire_advisory_20110831_tcm8-14230.txtVendor Advisory
• http://www.tibco.com/services/support/advisories/default.jspVendor Advisory

Published

Sep 2, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-3126WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remo…
• CVE-2011-3127WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not pr…
• CVE-2011-3128WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unat…
• CVE-2011-3129The file upload functionality in WordPress 3.1 before 3.1.3 …
• CVE-2011-3130wp-includes/taxonomy.php in WordPress 3.1 before 3.1.3 and 3…
• CVE-2011-3131Xen 4.1.1 and earlier allows local guest OS kernels with con…
• CVE-2011-3133Session fixation vulnerability in TIBCO Spotfire Server 3.0.…
• CVE-2011-3134Unspecified vulnerability in TIBCO Spotfire Server 3.0.x bef…
• CVE-2011-3135Unspecified vulnerability in the Runtime in IBM Tivoli Feder…
• CVE-2011-3136Unspecified vulnerability in the Management Console in IBM T…
• CVE-2011-3137Unspecified vulnerability in the Management Console in IBM T…
• CVE-2011-3138The LTPA STS module support implementation in IBM Tivoli Fed…