What’s Vulnerable › Products

TIBCO Spotfire Desktop vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your TIBCO Spotfire Desktop version is affected

Latest TIBCO Spotfire Desktop vulnerabilities

• CVE-2025-3115 — Spotfire Data Function Vulnerability (CVSS 9.8)
• CVE-2022-41558 — TIBCO Spotfire Stored Cross Site Scripting (XSS) Vulnerability (CVSS 5.4)
• CVE-2021-23273 — TIBCO Spotfire Cross Site Scripting Vulnerability (CVSS 5.4)
• CVE-2020-9416 — TIBCO Spotfire Stored Cross Site Scripting Vulnerability (CVSS 5.4)
• CVE-2019-17334 — TIBCO Spotfire Analyst and Desktop Remote Code Execution Via Shared Files (CVSS 8.0)
• CVE-2017-3181 — Multiple TIBCO Spotfire components are vulnerable to multiple unspecified SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query (CVSS 9.8)
• CVE-2017-3180 — Multiple TIBCO Spotfire components fail to sanitize user-supplied inout and are vulnerable to cross-site scripting (CVSS 5.4)
• CVE-2018-5437 — TIBCO Spotfire Product Family Information Disclosure Vulnerability (CVSS 8.8)
• CVE-2018-5435 — TIBCO Spotfire Product Family Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2015-4554 — (CVSS 7.5)