Spotfire Analytics Platform vulnerabilities

2 known vulnerabilities in Spotfire Analytics Platform from TIBCO. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Spotfire Statistics Services: Improper Control of Generation of Code

  CVE-2025-3115Apr 9, 2025Spotfire

  Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions. Additionally, insufficient validation of filenames during file uploads can enable attackers to upload and execute malicious f

• 8.4 High severity

  TIBCO Spotfire Analytics Platform for AWS…: Server-Side Request Forgery

  CVE-2022-30579Sep 20, 2022TIBCO Software

  The Web Player component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows a low privileged attacker with network access to execute blind Server Si