{
  "document" : {
    "aggregate_severity" : {
      "text" : "mittel"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "Der Spotfire Server ist die zentrale Komponente einer Spotfire Umgebung, mit der sich alle Spotfire Clients verbinden.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein Angreifer kann mehrere Schwachstellen in Spotfire Server ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen, einen Denial of Service Zustand herbeizuführen, Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, Benutzerrechte zu erhalten, seine Privilegien zu erhöhen, Dateien zu manipulieren oder falsche Informationen darzustellen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Linux\n- UNIX\n- Windows",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-4554 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-4554.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-4554 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4554"
    }, {
      "category" : "external",
      "summary" : "Spotfire Security Advisory vom 2026-11-12",
      "url" : "https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-november-12-2026-spotfire-cve-2026-111192-r3682/"
    }, {
      "category" : "external",
      "summary" : "Spotfire Security Advisory vom 2026-11-12",
      "url" : "https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-november-12-2026-spotfire-cve-2026-111193-r3683/"
    }, {
      "category" : "external",
      "summary" : "Spotfire Security Advisory vom 2026-11-12",
      "url" : "https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-november-12-2026-spotfire-cve-2026-111194-r3684/"
    }, {
      "category" : "external",
      "summary" : "Spotfire Security Advisory vom 2026-11-12",
      "url" : "https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-november-12-2026-spotfire-cve-2026-111195-r3685/"
    }, {
      "category" : "external",
      "summary" : "Spotfire Security Advisory vom 2026-11-12",
      "url" : "https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-november-12-2026-spotfire-cve-2026-111196-r3686/"
    }, {
      "category" : "external",
      "summary" : "Spotfire Security Advisory vom 2026-11-12",
      "url" : "https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-november-12-2026-spotfire-cve-2026-111197-r3687/"
    }, {
      "category" : "external",
      "summary" : "Spotfire Security Advisory vom 2026-11-12",
      "url" : "https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-november-12-2026-spotfire-cve-2026-111198-r3688/"
    } ],
    "source_lang" : "en-US",
    "title" : "Spotfire Server: Mehrere Schwachstellen",
    "tracking" : {
      "current_release_date" : "2026-11-12T23:00:00.000+00:00",
      "generator" : {
        "date" : "2026-11-13T13:08:26.079+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.7.0"
        }
      },
      "id" : "WID-SEC-W-2026-4554",
      "initial_release_date" : "2026-11-12T23:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-11-12T23:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      } ],
      "status" : "final",
      "version" : "1"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<14.0.14",
          "product" : {
            "name" : "Spotfire Server <14.0.14",
            "product_id" : "T063054"
          }
        }, {
          "category" : "product_version",
          "name" : "14.0.14",
          "product" : {
            "name" : "Spotfire Server 14.0.14",
            "product_id" : "T063054-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:spotfire:server:14.0.14"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<14.6.4",
          "product" : {
            "name" : "Spotfire Server <14.6.4",
            "product_id" : "T063055"
          }
        }, {
          "category" : "product_version",
          "name" : "14.6.4",
          "product" : {
            "name" : "Spotfire Server 14.6.4",
            "product_id" : "T063055-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:spotfire:server:14.6.4"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<15.1.0",
          "product" : {
            "name" : "Spotfire Server <15.1.0",
            "product_id" : "T063056"
          }
        }, {
          "category" : "product_version",
          "name" : "15.1.0",
          "product" : {
            "name" : "Spotfire Server 15.1.0",
            "product_id" : "T063056-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:spotfire:server:15.1.0"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Server"
      } ],
      "category" : "vendor",
      "name" : "Spotfire"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-111192",
    "product_status" : {
      "known_affected" : [ "T063054", "T063055", "T063056" ]
    },
    "release_date" : "2026-11-12T23:00:00.000+00:00",
    "title" : "CVE-2026-111192"
  }, {
    "cve" : "CVE-2026-111193",
    "product_status" : {
      "known_affected" : [ "T063054", "T063055", "T063056" ]
    },
    "release_date" : "2026-11-12T23:00:00.000+00:00",
    "title" : "CVE-2026-111193"
  }, {
    "cve" : "CVE-2026-111194",
    "product_status" : {
      "known_affected" : [ "T063054", "T063055", "T063056" ]
    },
    "release_date" : "2026-11-12T23:00:00.000+00:00",
    "title" : "CVE-2026-111194"
  }, {
    "cve" : "CVE-2026-111195",
    "product_status" : {
      "known_affected" : [ "T063054", "T063055", "T063056" ]
    },
    "release_date" : "2026-11-12T23:00:00.000+00:00",
    "title" : "CVE-2026-111195"
  }, {
    "cve" : "CVE-2026-111196",
    "product_status" : {
      "known_affected" : [ "T063054", "T063055", "T063056" ]
    },
    "release_date" : "2026-11-12T23:00:00.000+00:00",
    "title" : "CVE-2026-111196"
  }, {
    "cve" : "CVE-2026-111197",
    "product_status" : {
      "known_affected" : [ "T063054", "T063055", "T063056" ]
    },
    "release_date" : "2026-11-12T23:00:00.000+00:00",
    "title" : "CVE-2026-111197"
  }, {
    "cve" : "CVE-2026-111198",
    "product_status" : {
      "known_affected" : [ "T063054", "T063055", "T063056" ]
    },
    "release_date" : "2026-11-12T23:00:00.000+00:00",
    "title" : "CVE-2026-111198"
  } ]
}