Read the docs
TI-2025-02720 Aliases CVE-2025-3115GHSA-4gxx-54gw-qwch

Spotfire Data Function Vulnerability

Priority MEDIUM 44CWE-94Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-94.

Summary

Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions. Additionally, insufficient validation of filenames during file uploads can enable attackers to upload and execute malicious files, leading to arbitrary code execution

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00684 52nd percentileScored 2026-11-07
Fix Fixed Spotfire Statistics Services (Spotfire): 14.0.7Spotfire Analyst (Spotfire): 14.0.6+5 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SpotfireSpotfire Statistics Services14 to before 14.0.7; 14.1.0; 14.2.0; 14.3.0; 14.4.0; 14.4.114.0.7Patch availableCNA
SpotfireSpotfire Analyst14.0 to before 14.0.6; 14.1.0; 14.2.0; 14.3.0; 14.4.0; 14.4.114.0.6Patch availableCNA
SpotfireDeployment Kit used in Spotfire Server14.0 to before 14.0.7; 14.1.0; 14.2.0; 14.3.0; 14.4.0; 14.4.114.0.7Patch availableCNA
SpotfireSpotfire Desktop14.4 to before 14.4.214.4.2Patch availableCNA
SpotfireSpotfire for AWS Marketplace——No fix listedCNA
SpotfireSpotfire Enterprise Runtime for R - Server Edition1.17 to before 1.17.7; 1.18.0; 1.19.0; 1.20.0; 1.21.0; 1.21.11.17.7Patch availableCNA
SpotfireSpotfire Service for Python1.17 to before 1.17.7; 1.18.0 – 1.21.11.17.7Patch availableCNA
SpotfireSpotfire Service for R1.17 to before 1.17.7; 1.18.0 – 1.21.11.17.7Patch availableCNA
  • Spotfire Statistics Services VendorSpotfire Affected 14 to before 14.0.7; 14.1.0; 14.2.0; 14.3.0; 14.4.0; 14.4.1 Fixed in 14.0.7 Patch available CNA
  • Spotfire Analyst VendorSpotfire Affected 14.0 to before 14.0.6; 14.1.0; 14.2.0; 14.3.0; 14.4.0; 14.4.1 Fixed in 14.0.6 Patch available CNA
  • Deployment Kit used in Spotfire Server VendorSpotfire Affected 14.0 to before 14.0.7; 14.1.0; 14.2.0; 14.3.0; 14.4.0; 14.4.1 Fixed in 14.0.7 Patch available CNA
  • Spotfire Desktop VendorSpotfire Affected 14.4 to before 14.4.2 Fixed in 14.4.2 Patch available CNA
  • Spotfire for AWS Marketplace VendorSpotfire Affected — Fixed in — No fix listed CNA
  • Spotfire Enterprise Runtime for R - Server Edition VendorSpotfire Affected 1.17 to before 1.17.7; 1.18.0; 1.19.0; 1.20.0; 1.21.0; 1.21.1 Fixed in 1.17.7 Patch available CNA
  • Spotfire Service for Python VendorSpotfire Affected 1.17 to before 1.17.7; 1.18.0 – 1.21.1 Fixed in 1.17.7 Patch available CNA
  • Spotfire Service for R VendorSpotfire Affected 1.17 to before 1.17.7; 1.18.0 – 1.21.1 Fixed in 1.17.7 Patch available CNA

CPE configurations NVD · 27

CPEVersionsRoleVendor
cpe:2.3:a:tibco:spotfire_enterprise_runtime_for_r:*:*:*:*:-:*:*:*before 6.1.5VulnerableTIBCO
cpe:2.3:a:tibco:spotfire_statistics_services:*:*:*:*:*:*:*:*before 14.0.7VulnerableTIBCO
cpe:2.3:a:tibco:spotfire_statistics_services:14.1.0:*:*:*:*:*:*:*14.1.0VulnerableTIBCO
cpe:2.3:a:tibco:spotfire_statistics_services:14.2.0:*:*:*:*:*:*:*14.2.0VulnerableTIBCO
cpe:2.3:a:tibco:spotfire_statistics_services:14.3.0:*:*:*:*:*:*:*14.3.0VulnerableTIBCO
cpe:2.3:a:tibco:spotfire_statistics_services:14.4.0:*:*:*:*:*:*:*14.4.0VulnerableTIBCO
cpe:2.3:a:tibco:spotfire_statistics_services:14.4.1:*:*:*:*:*:*:*14.4.1VulnerableTIBCO
cpe:2.3:a:tibco:spotfire_enterprise_runtime_for_r:*:*:*:*:server:*:*:*before 1.17.7VulnerableTIBCO
cpe:2.3:a:tibco:spotfire_enterprise_runtime_for_r:1.18.0:*:*:*:server:*:*:*1.18.0VulnerableTIBCO
cpe:2.3:a:tibco:spotfire_enterprise_runtime_for_r:1.19.0:*:*:*:server:*:*:*1.19.0VulnerableTIBCO
  • cpe:2.3:a:tibco:spotfire_enterprise_runtime_for_r:*:*:*:*:-:*:*:* Versions before 6.1.5 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:spotfire_statistics_services:*:*:*:*:*:*:*:* Versions before 14.0.7 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:spotfire_statistics_services:14.1.0:*:*:*:*:*:*:* Versions 14.1.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:spotfire_statistics_services:14.2.0:*:*:*:*:*:*:* Versions 14.2.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:spotfire_statistics_services:14.3.0:*:*:*:*:*:*:* Versions 14.3.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:spotfire_statistics_services:14.4.0:*:*:*:*:*:*:* Versions 14.4.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:spotfire_statistics_services:14.4.1:*:*:*:*:*:*:* Versions 14.4.1 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:spotfire_enterprise_runtime_for_r:*:*:*:*:server:*:*:* Versions before 1.17.7 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:spotfire_enterprise_runtime_for_r:1.18.0:*:*:*:server:*:*:* Versions 1.18.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:spotfire_enterprise_runtime_for_r:1.19.0:*:*:*:server:*:*:* Versions 1.19.0 Vulnerable ·TIBCO
Show 17 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:tibco:spotfire_enterprise_runtime_for_r:1.20.0:*:*:*:server:*:*:*1.20.0VulnerableTIBCO
cpe:2.3:a:tibco:spotfire_enterprise_runtime_for_r:1.21.0:*:*:*:server:*:*:*1.21.0VulnerableTIBCO
cpe:2.3:a:tibco:spotfire_enterprise_runtime_for_r:1.21.1:*:*:*:server:*:*:*1.21.1VulnerableTIBCO
cpe:2.3:a:tibco:spotfire_analyst:*:*:*:*:*:*:*:*before 14.0.6VulnerableTIBCO
cpe:2.3:a:tibco:spotfire_analyst:14.1.0:*:*:*:*:*:*:*14.1.0VulnerableTIBCO
cpe:2.3:a:tibco:spotfire_analyst:14.2.0:*:*:*:*:*:*:*14.2.0VulnerableTIBCO
cpe:2.3:a:tibco:spotfire_analyst:14.3.0:*:*:*:*:*:*:*14.3.0VulnerableTIBCO
cpe:2.3:a:tibco:spotfire_analyst:14.4.0:*:*:*:*:*:*:*14.4.0VulnerableTIBCO
cpe:2.3:a:tibco:spotfire_analyst:14.4.1:*:*:*:*:*:*:*14.4.1VulnerableTIBCO
cpe:2.3:a:tibco:spotfire_deployment_kit:*:*:*:*:*:*:*:*before 14.0.7VulnerableTIBCO
cpe:2.3:a:tibco:spotfire_deployment_kit:14.1.0:*:*:*:*:*:*:*14.1.0VulnerableTIBCO
cpe:2.3:a:tibco:spotfire_deployment_kit:14.2.0:*:*:*:*:*:*:*14.2.0VulnerableTIBCO
cpe:2.3:a:tibco:spotfire_deployment_kit:14.3.0:*:*:*:*:*:*:*14.3.0VulnerableTIBCO
cpe:2.3:a:tibco:spotfire_deployment_kit:14.4.0:*:*:*:*:*:*:*14.4.0VulnerableTIBCO
cpe:2.3:a:tibco:spotfire_deployment_kit:14.4.1:*:*:*:*:*:*:*14.4.1VulnerableTIBCO
cpe:2.3:a:tibco:spotfire_desktop:*:*:*:*:*:*:*:*before 14.4.2VulnerableTIBCO
cpe:2.3:a:tibco:spotfire_analytics_platform:*:*:*:*:*:aws_marketplace:*:*before 14.4.2VulnerableTIBCO
  • cpe:2.3:a:tibco:spotfire_enterprise_runtime_for_r:1.20.0:*:*:*:server:*:*:* Versions 1.20.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:spotfire_enterprise_runtime_for_r:1.21.0:*:*:*:server:*:*:* Versions 1.21.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:spotfire_enterprise_runtime_for_r:1.21.1:*:*:*:server:*:*:* Versions 1.21.1 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:spotfire_analyst:*:*:*:*:*:*:*:* Versions before 14.0.6 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:spotfire_analyst:14.1.0:*:*:*:*:*:*:* Versions 14.1.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:spotfire_analyst:14.2.0:*:*:*:*:*:*:* Versions 14.2.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:spotfire_analyst:14.3.0:*:*:*:*:*:*:* Versions 14.3.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:spotfire_analyst:14.4.0:*:*:*:*:*:*:* Versions 14.4.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:spotfire_analyst:14.4.1:*:*:*:*:*:*:* Versions 14.4.1 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:spotfire_deployment_kit:*:*:*:*:*:*:*:* Versions before 14.0.7 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:spotfire_deployment_kit:14.1.0:*:*:*:*:*:*:* Versions 14.1.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:spotfire_deployment_kit:14.2.0:*:*:*:*:*:*:* Versions 14.2.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:spotfire_deployment_kit:14.3.0:*:*:*:*:*:*:* Versions 14.3.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:spotfire_deployment_kit:14.4.0:*:*:*:*:*:*:* Versions 14.4.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:spotfire_deployment_kit:14.4.1:*:*:*:*:*:*:* Versions 14.4.1 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:spotfire_desktop:*:*:*:*:*:*:*:* Versions before 14.4.2 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:spotfire_analytics_platform:*:*:*:*:*:aws_marketplace:*:* Versions before 14.4.2 Vulnerable ·TIBCO

Remediation

  • Fix · CNA Spotfire Statistics Services (Spotfire) Fixed in 14.0.7
  • Fix · CNA Spotfire Analyst (Spotfire) Fixed in 14.0.6
  • Fix · CNA Deployment Kit used in Spotfire Server (Spotfire) Fixed in 14.0.7
  • Fix · CNA Spotfire Desktop (Spotfire) Fixed in 14.4.2
  • Fix · CNA Spotfire Enterprise Runtime for R - Server Edition (Spotfire) Fixed in 1.17.7
  • Fix · CNA Spotfire Service for Python (Spotfire) Fixed in 1.17.7
  • Fix · CNA Spotfire Service for R (Spotfire) Fixed in 1.17.7

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-3115
  2. 2026-10-03 Alias added: GHSA-4gxx-54gw-qwch

References

Other 1

  • TI-2024-03117 Spotfire Remote Code Execution Vulnerability CVSS 3.1CRITICAL 9.9
  • TI-2025-02719 Spotfire Code Execution Vulnerability CVSS 4.0CRITICAL 9.4
  • TI-2026-07549 Spotfire OAuth2 PKCE Bypass for public clients CVSS 4.0HIGH 8.7
  • TI-2024-03118 Spotfire: NTLM token leakage CVSS 3.1MEDIUM 6.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences