CVE-2014-2544

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-04-10 · updated 2026-06-17

Description

Unspecified vulnerability in Spotfire Web Player Engine, Spotfire Desktop, and Spotfire Server Authentication Module in TIBCO Spotfire Server 3.3.x before 3.3.4, 4.5.x before 4.5.1, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.2; Spotfire Professional 4.0.x before 4.0.4, 4.5.x before 4.5.2, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.1; Spotfire Web Player 4.0.x before 4.0.4, 4.5.x before 4.5.2, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.1; Spotfire Automation Services 4.0.x before 4.0.4, 4.5.x before 4.5.2, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.1; Spotfire Deployment Kit 4.0.x before 4.0.4, 4.5.x before 4.5.2, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.1; Spotfire Desktop 6.x before 6.0.1; and Spotfire Analyst 6.x before 6.0.1 allows remote attackers to execute arbitrary code via unknown vectors.

Affected products

TIBCO Analyst: through 6.0.0
TIBCO Automation Services: through 4.0.3; 4.5.0, 4.5.1, 5.0.0, 5.0.1, 5.5.0, 6.0.0
TIBCO Deployment Kit: through 4.0.3; 4.5.0, 4.5.1, 5.0.0, 5.0.1, 5.5.0, 6.0.0
TIBCO Desktop: through 6.0.0
TIBCO Spotfire Professional: through 4.0.3; 4.5.0, 4.5.1, 5.0.0, 5.0.1, 5.5.0, 6.0.0
TIBCO Software Inc. TIBCO Spotfire Server: through 3.3.3; 4.5.0, 5.0.0, 5.0.1, 5.5.0, 6.0.0, 6.0.1
TIBCO Web Player: through 4.0.3; 4.5.0, 4.5.1, 5.0.0, 5.0.1, 5.5.0, 6.0.0

References

Get alerted when CVE-2014-2544 or the next vulnerability affects your stack