Spotfire vulnerabilities
We track 3 vulnerabilities in Spotfire products across 10 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 9, 2025.
Latest Spotfire vulnerabilities
- 9.8 Critical severity
Spotfire Statistics Services: Improper Control of Generation of Code
Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions. Additionally, insufficient validation of filenames during file uploads can enable attackers to upload and execute malicious f
- 9.4 Critical severity
Spotfire Enterprise Runtime for R: Improper Control of Generation of Code
Code Execution via Malicious Files: Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise. Sandbox Bypass Vulnerability: A flaw in the TERR security mecha
- 9.9 Critical severity
Spotfire Analyst: Execution with Unnecessary Privileges
Vulnerability in Spotfire Spotfire Analyst, Spotfire Spotfire Server, Spotfire Spotfire for AWS Marketplace allows In the case of the installed Windows client: Successful execution of this vulnerability will result in an attacker being able to run arbitrary co