CVE-2013-2373

The Engine in TIBCO Spotfire Web Player 3.3.x before 3.3.3, 4.0.x before 4.0.3, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 does not properly implement access control, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors.

• CWE-264

• http://www.tibco.com/mk/advisory.jspVendor Advisory
• http://www.tibco.com/multimedia/spotfire-web-player-advisory-2013-03-12_tcm8-18480.txtVendor Advisory
• http://www.tibco.com/services/support/advisories/spotfire-advisory_20130313.jspVendor Advisory
• http://www.tibco.com/mk/advisory.jspVendor Advisory
• http://www.tibco.com/multimedia/spotfire-web-player-advisory-2013-03-12_tcm8-18480.txtVendor Advisory
• http://www.tibco.com/services/support/advisories/spotfire-advisory_20130313.jspVendor Advisory

Published

Mar 15, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-2367Multiple unspecified vulnerabilities in HP SiteScope 11.20 a…
• CVE-2013-2368Unspecified vulnerability in HP LoadRunner before 11.52 allo…
• CVE-2013-2369Unspecified vulnerability in HP LoadRunner before 11.52 allo…
• CVE-2013-2370Unspecified vulnerability in HP LoadRunner before 11.52 allo…
• CVE-2013-2371The Web API in the Statistics Server in TIBCO Spotfire Stati…
• CVE-2013-2372Cross-site scripting (XSS) vulnerability in the Engine in TI…
• CVE-2013-2374Unspecified vulnerability in the PeopleSoft Enterprise Peopl…
• CVE-2013-2375Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier…
• CVE-2013-2376Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier…
• CVE-2013-2377Unspecified vulnerability in the Oracle FLEXCUBE Direct Bank…
• CVE-2013-2378Unspecified vulnerability in Oracle MySQL 5.1.67 and earlier…
• CVE-2013-2379Unspecified vulnerability in the Oracle FLEXCUBE Direct Bank…