Read the docs

Spotfire

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Spotfire records in CISA KEV

No Spotfire vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2024-03117 CVE-2024-3330 · GHSA-65p7-vc93-6p69

Spotfire Remote Code Execution Vulnerability

Priority MEDIUM 44

Vulnerability in Spotfire Spotfire Analyst, Spotfire Spotfire Server, Spotfire Spotfire for AWS Marketplace allows In the case of the installed Windows client: Successful execution of this vulnerability will result in an…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00587 Published 2024-06-27 Fixed in 14.3.0 CWE-250
TI-2025-02719 CVE-2025-3114 · GHSA-v6v7-m3w9-36g8

Spotfire Code Execution Vulnerability

Priority MEDIUM 43

Code Execution via Malicious Files: Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00608 Published 2025-04-09 No fix listed CWE-693
TI-2026-07549 CVE-2026-8590 · GHSA-q55h-7282-gq6q

Spotfire OAuth2 PKCE Bypass for public clients

Priority MEDIUM 40

Vulnerability in Spotfire Spotfire Enterprise (Spotfire Server modules), Spotfire Spotfire Enterprise with External Consumers (Spotfire Server modules), Spotfire Spotfire on Kubernetes (Spotfire Server modules).

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00428 Published 2026-07-14 No fix listed
TI-2024-03118 CVE-2024-3331 · GHSA-frr7-vm5q-h4f9

Spotfire: NTLM token leakage

Priority LOW 30

Vulnerability in Spotfire Spotfire Enterprise Runtime for R - Server Edition, Spotfire Spotfire Statistics Services, Spotfire Spotfire Analyst, Spotfire Spotfire Desktop, Spotfire Spotfire Server allows The impact of thi…

CVSS 3.1MEDIUM 6.8 Network Low privileges User interaction EPSS 0.00377 Published 2024-06-27 No fix listed CWE-863
Open these records in search →