CVE-2019-17334

The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfire Desktop Language Packs contains a vulnerability that theoretically allows an attacker with permission to write DXP files to the Spotfire library to remotely execute code of their choice on the user account of other users who access the affected system. This attack is a risk only when the attacker has write access to a network file system shared with the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analyst: versions 7.11.1 and below, versions 7.12.0, 7.13.0, 7.14.0, 10.0.0, 10.1.0, 10.2.0, 10.3.0, 10.3.1, and 10.3.2, versions 10.4.0, 10.5.0, and 10.6.0, TIBCO Spotfire Analytics Platform for AWS Marketplace: version 10.6.0, TIBCO Spotfire Deployment Kit: versions 7.11.1 and below, TIBCO Spotfire Desktop: versions 7.11.1 and below, versions 7.12.0, 7.13.0, 7.14.0, 10.0.0, 10.1.0, 10.2.0, 10.3.0, 10.3.1, and 10.3.2, versions 10.4.0, 10.5.0, and 10.6.0, and TIBCO Spotfire Desktop Language Packs: versions 7.11.1 and below.

• CWE-276

• http://www.tibco.com/services/support/advisoriesVendor Advisory
• https://www.tibco.com/support/advisories/2019/12/tibco-security-advisory-december-17-2019-tibco-spotfire-2019-17334Vendor Advisory
• http://www.tibco.com/services/support/advisoriesVendor Advisory
• https://www.tibco.com/support/advisories/2019/12/tibco-security-advisory-december-17-2019-tibco-spotfire-2019-17334Vendor Advisory

Published

Dec 17, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-17327JEUS 7 Fix#0~5 and JEUS 8Fix#0~1 versions contains a directo…7.2
• CVE-2019-1733A vulnerability in the NX API (NX-API) Sandbox interface for…5.4
• CVE-2019-17330The Web server component of TIBCO Software Inc.'s TIBCO EBX …9.6
• CVE-2019-17331The Data Exchange Web Interface component of TIBCO Software …5.4
• CVE-2019-17332The Digital Asset Manager Web Interface component of TIBCO S…5.4
• CVE-2019-17333The Web server component of TIBCO Software Inc.'s TIBCO EBX …5.4
• CVE-2019-17335The Data access layer component of TIBCO Software Inc.'s TIB…6.5
• CVE-2019-17336The Data access layer component of TIBCO Software Inc.'s TIB…6.5
• CVE-2019-17337The Spotfire library component of TIBCO Software Inc.'s TIBC…5.4
• CVE-2019-17338The user interface component of TIBCO Software Inc.'s TIBCO …5.4
• CVE-2019-17339The VirtualRouter component of TIBCO Software Inc.'s TIBCO S…8.1
• CVE-2019-1734A vulnerability in the implementation of a CLI diagnostic co…5.5