Spotfire Analyst vulnerabilities
3 known vulnerabilities in Spotfire Analyst from Spotfire. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Spotfire Statistics Services: Improper Control of Generation of Code
Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions. Additionally, insufficient validation of filenames during file uploads can enable attackers to upload and execute malicious f
- 9.4 Critical severity
Spotfire Enterprise Runtime for R: Improper Control of Generation of Code
Code Execution via Malicious Files: Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise. Sandbox Bypass Vulnerability: A flaw in the TERR security mecha
- 9.9 Critical severity
Spotfire Analyst: Execution with Unnecessary Privileges
Vulnerability in Spotfire Spotfire Analyst, Spotfire Spotfire Server, Spotfire Spotfire for AWS Marketplace allows In the case of the installed Windows client: Successful execution of this vulnerability will result in an attacker being able to run arbitrary co