CVE-2012-0690

CVE-2012-0690 describes an information disclosure vulnerability in multiple TIBCO Spotfire applications, including Web Application, Web Player, Automation Services, and Analytics Client, across several versions. This flaw allows unauthenticated remote attackers to retrieve sensitive information by crafting a specific URL. With a CVSS score of 5.0, it is a medium severity vulnerability, requiring no authentication or complex attack vectors, and primarily impacts confidentiality. Despite its age, there is no public exploit code available, no evidence of active exploitation, and minimal community discussion or media coverage, suggesting a low likelihood of real-world exploitation.