CVE Feed

    Dashboard / CVE / CVE-2025-3115

    CVE-2025-3115

    Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions. Additionally, insufficient validation of filenames during file uploads can enable attackers to upload and execute malicious files, leading to arbitrary code execution

    Published:Apr 9, 2025
    Last Modified:Nov 11, 2025
    EPS:Apr 9, 2025
    EPSS Score:0.0015
    CVSS Score:9.8

    Affected Products

    Vendor
    Tibco
    Product
    Spotfire Analyst
    Vendor
    Tibco
    Product
    Spotfire Analytics Platform
    Vendor
    Tibco
    Product
    Spotfire Deployment Kit
    Vendor
    Tibco
    Product
    Spotfire Desktop
    Vendor
    Tibco
    Product
    Spotfire Enterprise Runtime For R
    Vendor
    Tibco
    Product
    Spotfire Statistics Services

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-26221 (CVSS 5) — The Spotfire Connectors component of TIBCO Software Inc.'s Spotfire Analyst, Spotfire Server, and Spotfire for…
    CVE-2023-26220 (CVSS 5.4) — The Spotfire Library component of TIBCO Software Inc.'s Spotfire Analyst and Spotfire Server contains an easil…
    CVE-2022-41558 (CVSS 9) — The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Sp…
    CVE-2021-23273 (CVSS 8) — The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platfo…
    CVE-2020-9416 (CVSS 8.2) — The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platfo…
    CVE-2019-17334 (CVSS 8) — The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platfor…
    CVE-2017-3181 (CVSS 9.8) — Multiple TIBCO Products are prone to multiple unspecified SQL-injection vulnerabilities because it fails to pr…
    CVE-2017-3180 (CVSS 5.4) — Multiple TIBCO Products are prone to multiple unspecified cross-site scripting vulnerabilities because it fail…
    CVE-2018-5435 (CVSS 9.6) — The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotf…
    CVE-2018-5437 (CVSS 6.8) — The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotf…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High