TIBCO Statistica 14.0.0 (also known as TIBCO Data Science - Workbench 1.3) hotfix availability after release of security advisories affecting Data Entry and Statistica Server (WebStatistica)

book

Article ID: KB0070942

calendar_today

Updated On:

Products	Versions
Spotfire Statistica	14.0.0

Description

The following security advisories affect Data Entry and Statistica Server (also known as WebStatistica) and were released on August 16, 2022:

TIBCO Security Advisory: August 16, 2022 - TIBCO Statistica - CVE-2022-30576: TIBCO Statistica Stored Cross Site Scripting (XSS) Vulnerability
TIBCO Security Advisory: August 16, 2022 - TIBCO Statistica - CVE-2022-30575: TIBCO Statistica Reflected Cross Site Scripting (XSS) Vulnerability

Due to the above vunerabilities which affected versions 14.0.0 and lower, hotfixes will no longer be provided for TIBCO Statistica 14.0.0 (also known as TIBCO Data Science - Workbench 1.3).

Environment

OS: Windows

Resolution

To get the latest fixes, upgrade to TIBCO Statistica 14.0.1 or higher (TIBCO Data Science - Workbench 1.4 or higher). Version 14.0.1 can be downloaded from TIBCO eDelivery here:

TIBCO Statistica Software vesion 14.0.1

Issue/Introduction

Two security advisories issued on August 16, 2022 provided information regarding vulnerabilities related to TIBCO Statistica 14.0.0 (also know as TIBCO Data Science - Workbench 1.0.3). The solution to the vulnerabilities is to upgrade to version 14.0.1 or higher.