CVE-2019-17337: TIBCO Spotfire Server Library Vulnerable to Reflected Cross-Site Scripting

Security readout for executives and security teams

This vulnerability affects the library component in certain TIBCO Spotfire Server and AWS Marketplace releases. It could let an attacker trick a user into triggering reflected cross-site scripting, potentially exposing or modifying sensitive session data. The source data rates it high, but does not show confirmed active exploitation. Exposure is most likely where affected TIBCO Spotfire Server versions or the AWS Marketplace 10.6.0 platform remain deployed, especially if reachable by untrusted users. The source bundle does not identify vulnerable paths, configurations, or fixed versions. Treat this as a high-priority remediation item for organizations still running the listed Spotfire versions. The business risk is unauthorized script execution against users of an analytics platform that may handle sensitive business data. Mitigation focus: Inventory all TIBCO Spotfire Server and AWS Marketplace deployments and record exact versions.; Check the TIBCO advisory for vendor-approved fixed versions and remediation instructions.; Prioritize remediation for internet-facing or broadly accessible Spotfire environments..

Prepared

May 23, 2026, 10:29 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.