CVE-2013-2372

Cross-site scripting (XSS) vulnerability in the Engine in TIBCO Spotfire Web Player 3.3.x before 3.3.3, 4.0.x before 4.0.3, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

• CWE-79

• http://www.tibco.com/mk/advisory.jspVendor Advisory
• http://www.tibco.com/multimedia/spotfire-web-player-advisory-2013-03-12_tcm8-18480.txtVendor Advisory
• http://www.tibco.com/services/support/advisories/spotfire-advisory_20130313.jspVendor Advisory
• http://www.tibco.com/mk/advisory.jspVendor Advisory
• http://www.tibco.com/multimedia/spotfire-web-player-advisory-2013-03-12_tcm8-18480.txtVendor Advisory
• http://www.tibco.com/services/support/advisories/spotfire-advisory_20130313.jspVendor Advisory

Published

Mar 15, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-2366Unspecified vulnerability in HP Business Process Monitor 9.1…
• CVE-2013-2367Multiple unspecified vulnerabilities in HP SiteScope 11.20 a…
• CVE-2013-2368Unspecified vulnerability in HP LoadRunner before 11.52 allo…
• CVE-2013-2369Unspecified vulnerability in HP LoadRunner before 11.52 allo…
• CVE-2013-2370Unspecified vulnerability in HP LoadRunner before 11.52 allo…
• CVE-2013-2371The Web API in the Statistics Server in TIBCO Spotfire Stati…
• CVE-2013-2373The Engine in TIBCO Spotfire Web Player 3.3.x before 3.3.3, …
• CVE-2013-2374Unspecified vulnerability in the PeopleSoft Enterprise Peopl…
• CVE-2013-2375Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier…
• CVE-2013-2376Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier…
• CVE-2013-2377Unspecified vulnerability in the Oracle FLEXCUBE Direct Bank…
• CVE-2013-2378Unspecified vulnerability in Oracle MySQL 5.1.67 and earlier…