CVE-2021-43051

The Spotfire Server component of TIBCO Software Inc.'s TIBCO Spotfire Server, TIBCO Spotfire Server, and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows malicious custom API clients with network access to execute internal API operations outside of the scope of those granted to it. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Server: versions 10.10.6 and below, TIBCO Spotfire Server: versions 11.0.0, 11.1.0, 11.2.0, 11.3.0, 11.4.0, and 11.4.1, and TIBCO Spotfire Server: versions 11.5.0 and 11.6.0.

• https://www.tibco.com/services/support/advisoriesVendor Advisory
• https://www.tibco.com/support/advisories/2021/12/tibco-security-advisory-december-14-2021-tibco-spotfire-server-2021-43051Vendor Advisory
• https://www.tibco.com/services/support/advisoriesVendor Advisory
• https://www.tibco.com/support/advisories/2021/12/tibco-security-advisory-december-14-2021-tibco-spotfire-server-2021-43051Vendor Advisory

Published

Dec 14, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43046The Interior Server and Gateway Server components of TIBCO S…8.8
• CVE-2021-43047The Interior Server and Gateway Server components of TIBCO S…9
• CVE-2021-43048The Interior Server and Gateway Server components of TIBCO S…9.8
• CVE-2021-43049The Database component of TIBCO Software Inc.'s TIBCO Busine…9.8
• CVE-2021-4305A vulnerability was found in Woorank robots-txt-guard. It ha…7.5
• CVE-2021-43050The Auth Server component of TIBCO Software Inc.'s TIBCO Bus…7.8
• CVE-2021-43052The Realm Server component of TIBCO Software Inc.'s TIBCO FT…7.5
• CVE-2021-43053The Realm Server component of TIBCO Software Inc.'s TIBCO FT…7.5
• CVE-2021-43054The eFTL Server component of TIBCO Software Inc.'s TIBCO eFT…8.8
• CVE-2021-43055The eFTL Server component of TIBCO Software Inc.'s TIBCO eFT…8.8
• CVE-2021-43056An issue was discovered in the Linux kernel for powerpc befo…5.5
• CVE-2021-43057An issue was discovered in the Linux kernel before 5.14.8. A…7.8