← Vulnerability feed

Vulnerability record · CVE-2022-30579 · published 20 September 2022

CVE-2022-30579: Tibco spotfire analytics platform server-side request forgery (ssrf) vulnerability

Tibco · Spotfire Analytics Platform

The Web Player component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows a low privileged attacker with network access to execute blind Server Side Request Forgery (SSRF) on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: version 12.0.0 and TIBCO Spotfire Server: version 12.0.0.

8.4 CVSS 3.1 High EPSS 0.59% · top 53.5% CWE-918 · Server-side request forgery (SSRF)
8.4CVSS 3.1 base score
0.59%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

The Web Player component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows a low privileged attacker with network access to execute blind Server Side Request Forgery (SSRF) on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: version 12.0.0 and TIBCO Spotfire Server: version 12.0.0.

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.tibco.com/services/support/advisories Vendor Advisory
https://www.tibco.com/support/advisories/2022/09/tibco-security-advisory-september-20-2022-tibco-spotfire-cve-2022-30579 Vendor Advisory
https://www.tibco.com/services/support/advisories Vendor Advisory
https://www.tibco.com/support/advisories/2022/09/tibco-security-advisory-september-20-2022-tibco-spotfire-cve-2022-30579 Vendor Advisory

Track CVE-2022-30579 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2018-18814Tibco spotfire analytics platform for aws improper authentication vulnerabilityThe TIBCO Spotfire authentication component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server…EPSS 3.1%9.4CVE-2025-3115Tibco spotfire enterprise runtime for r code injection vulnerabilityInjection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions. Additionally, …EPSS 0.68%8.8CVE-2020-9408Tibco spotfire analytics platform for aws incorrect default permissions vulnerabilityThe Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vu…EPSS 1.3%8.8CVE-2018-5436Tibco spotfire analytics platform for aws information exposure vulnerabilityThe Spotfire server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contain multi…EPSS 1.0%7.8CVE-2021-23275Tibco enterprise runtime for r incorrect permission assignment vulnerabilityThe Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server …EPSS 0.22%7.8CVE-2021-28830Tibco enterprise runtime for r vulnerabilityThe TIBCO Spotfire Server and TIBCO Enterprise Runtime for R components of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIB…EPSS 0.25%7.5CVE-2014-5285Tibco spotfire server vulnerabilityUnspecified vulnerability in the Authentication Module in TIBCO Spotfire Server before 4.5.2, 5.0.x before 5.0.3, 5.5.x before 5.5.2, 6.0.x before 6.…EPSS 2.0%7.5CVE-2014-2544Tibco web player vulnerabilityUnspecified vulnerability in Spotfire Web Player Engine, Spotfire Desktop, and Spotfire Server Authentication Module in TIBCO Spotfire Server 3.3.x b…EPSS 3.1%

Source: NIST National Vulnerability Database (record CVE-2022-30579), CISA KEV, FIRST EPSS (scores of 2026-10-11). This page is refreshed as NVD updates the record.