CVE-2013-2373

MEDIUM · CVSS 6.4 EPSS 1.32%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2013-03-15 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2013-2373

Severity

MEDIUM

CVSS

6.4

EPSS

1.32%

Original Filing — NVD Description

The Engine in TIBCO Spotfire Web Player 3.3.x before 3.3.3, 4.0.x before 4.0.3, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 does not properly implement access control, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors.