CVE:CVE-2012-0690
CNNVD:CNNVD-201203-238
Spotfire Analytics Server 10.1.2之前版本，Server 3.3.3之前版本，及Web Player，Automation Services，及Professional 4.0.2之前版本的TIBCO Spotfire Web Applicatio，Web Player Applicatio，Automation Services Applicatio，与Analytics Client Applicatio中存在漏洞。远程攻击者可利用该漏洞借助特制URL获取敏感信息。
solution:Upgrade tibco spotfire_analytics_server to a higher version than 10.0.0,10.0.1,and avoid the version 10.0.0,10.0.1; Upgrade tibco spotfire_server to a higher version than 3.0.0,3.0.1,3.1.0,3.1.1,3.2.0,3.3.0,and avoid the version 3.0.0,3.0.1,3.1.0,3.1.1,3.2.0,3.3.0; Upgrade tibco web_player_automation_services to a higher version than *; Upgrade tibco spotfire_professional to a higher version than 4.0.1,and avoid the version (,4.0.1]