Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Spotfire Clear all filters
TI-2026-07549 CVE-2026-8590 · GHSA-q55h-7282-gq6q

Spotfire OAuth2 PKCE Bypass for public clients

Priority MEDIUM 40

Vulnerability in Spotfire Spotfire Enterprise (Spotfire Server modules), Spotfire Spotfire Enterprise with External Consumers (Spotfire Server modules), Spotfire Spotfire on Kubernetes (Spotfire Server modules).

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00428 Published 2026-07-14 No fix listed
TI-2025-02719 CVE-2025-3114 · GHSA-v6v7-m3w9-36g8

Spotfire Code Execution Vulnerability

Priority MEDIUM 43

Code Execution via Malicious Files: Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00608 Published 2025-04-09 No fix listed CWE-693
TI-2024-03118 CVE-2024-3331 · GHSA-frr7-vm5q-h4f9

Spotfire: NTLM token leakage

Priority LOW 30

Vulnerability in Spotfire Spotfire Enterprise Runtime for R - Server Edition, Spotfire Spotfire Statistics Services, Spotfire Spotfire Analyst, Spotfire Spotfire Desktop, Spotfire Spotfire Server allows The impact of thi…

CVSS 3.1MEDIUM 6.8 Network Low privileges User interaction EPSS 0.00377 Published 2024-06-27 No fix listed CWE-863
TI-2024-03117 CVE-2024-3330 · GHSA-65p7-vc93-6p69

Spotfire Remote Code Execution Vulnerability

Priority MEDIUM 44

Vulnerability in Spotfire Spotfire Analyst, Spotfire Spotfire Server, Spotfire Spotfire for AWS Marketplace allows In the case of the installed Windows client: Successful execution of this vulnerability will result in an…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00587 Published 2024-06-27 Fixed in 14.3.0 CWE-250