TIBCO Spotfire Analyst vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Latest TIBCO Spotfire Analyst vulnerabilities

CVE-2025-3115 — Spotfire Data Function Vulnerability (CVSS 9.8)
CVE-2024-3330 — Spotfire Remote Code Execution Vulnerability (CVSS 9.9)
CVE-2023-26221 — TIBCO Spotfire Insufficiently Protected Credential vulnerability (CVSS 3.9)
CVE-2023-26220 — TIBCO Spotfire Stored Cross-site Scripting (XSS) vulnerability (CVSS 5.4)
CVE-2022-41558 — TIBCO Spotfire Stored Cross Site Scripting (XSS) Vulnerability (CVSS 5.4)
CVE-2021-23273 — TIBCO Spotfire Cross Site Scripting Vulnerability (CVSS 5.4)
CVE-2020-9416 — TIBCO Spotfire Stored Cross Site Scripting Vulnerability (CVSS 5.4)
CVE-2019-17334 — TIBCO Spotfire Analyst and Desktop Remote Code Execution Via Shared Files (CVSS 8.0)
CVE-2017-3181 — Multiple TIBCO Spotfire components are vulnerable to multiple unspecified SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query (CVSS 9.8)
CVE-2017-3180 — Multiple TIBCO Spotfire components fail to sanitize user-supplied inout and are vulnerable to cross-site scripting (CVSS 5.4)
CVE-2018-5437 — TIBCO Spotfire Product Family Information Disclosure Vulnerability (CVSS 8.8)
CVE-2018-5435 — TIBCO Spotfire Product Family Remote Code Execution Vulnerability (CVSS 9.8)
CVE-2015-4554 — (CVSS 7.5)