CVE-2025-3115

CVE-2025-3115 involves TIBCO Spotfire data functions with injection vulnerabilities and insufficient validation of filenames during file uploads, enabling potential arbitrary code execution. Connected sources indicate this is a high-severity issue (CVSS 3.1/4.0, CRITICAL) affecting Spotfire compo...

CVE-2021-23273

The CVE-2021-23273 entry describes a stored XSS vulnerability in the Spotfire client components across multiple TIBCO Spotfire products (Analyst, Analytics Platform for AWS, Desktop, Server). A low-privileged attacker with network access can trigger a stored XSS that requires user interaction. Af...

CVE-2022-41558

The CVE-2022-41558 entry describes a Stored Cross Site Scripting (XSS) vulnerability in the Visualizations component of TIBCO Spotfire products (Analyst, Desktop, Server, and Analytics Platform for AWS Marketplace). A low-privileged, network-connected attacker can trigger XSS with user interactio...

CVE-2018-5435

The CVE-2018-5435 entry concerns multiple vulnerabilities in TIBCO Spotfire Client and Spotfire Web Player Client components across several Spotfire products (Analyst, AWS Marketplace platform, Deployment Kit, Desktop, and Desktop Language Packs). Affected releases include Spotfire Analyst up to ...

CVE-2020-9416

CVE-2020-9416 affects TIBCO Spotfire client components (Analyst, Analytics Platform for AWS Marketplace, Desktop, Server) across multiple versions: Analyst 10.7.0–10.10.0, Analytics Platform AWS 10.7.0–10.10.1, Desktop 10.7.0–10.10.0, Server 10.7.0–10.10.1. Described as a stored cross-site script...

CVE-2017-3180

CVE-2017-3180 involves multiple TIBCO Spotfire components susceptible to unspecified cross-site scripting due to improper sanitization of user input. Affected products include TIBCO Spotfire Analyst, Desktop, Deployment Kit, Web Player, Automation Services, Connectors, and related platforms acros...

CVE-2015-4554

Technical details about CVE-2015-4554 are not publicly available in the provided connected documents; monitor for updates from vendors and databases.

CVE-2018-5437

CVE-2018-5437 affects TIBCO Spotfire family components (Spotfire Analyst, Spotfire Web Player Client, Deployment Kit, Desktop, Desktop Language Packs) with multiple vulnerabilities leading to unauthorized information disclosure. Affected releases include Spotfire Analyst up to 7.12.0 across vario...

CVE-2019-17334

The CVE-2019-17334 issue affects TIBCO Spotfire products where the Visualizations component allows a user with write access to a shared DXP library to remotely execute code in other users’ contexts. Affected are Spotfire Analyst (multiple major versions), Spotfire Deployment Kit, Spotfire Desktop...

CVE-2017-3181

CVE-2017-3181 affects multiple TIBCO Spotfire components: Spotfire Analyst 7.7.0; Connectors 7.6.0; Deployment Kit 7.7.0; Spotfire Desktop 7.6.0/7.7.0; Desktop Developer Edition 7.7.0; Desktop Language Packs 7.6.0/7.7.0; affected components include Spotfire Client and Spotfire Web Player Client. ...