TIBCO Spotfire Analytics Platform vulnerabilities

7 CVEs affecting TIBCO Spotfire Analytics Platform, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-3115, published 2025-04-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-3115, published 2025-04-09. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions. Additionally, insufficient validation of filenames during file…
CVE-2022-30579, published 2022-09-20. High severity, CVSS 8.4. EPSS: 0.6% chance of exploitation in the next 30 days. The Web Player component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows a low…
CVE-2020-9416, published 2020-09-15. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, and TIBCO Spotfire Server contains a…
CVE-2022-41558, published 2022-11-15. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire…
CVE-2021-28830, published 2021-06-29. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. The TIBCO Spotfire Server and TIBCO Enterprise Runtime for R components of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition,…
CVE-2021-23275, published 2021-06-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server…
CVE-2023-26221, published 2023-11-08. Low severity, CVSS 3.9. EPSS: 0.2% chance of exploitation in the next 30 days. The Spotfire Connectors component of TIBCO Software Inc.'s Spotfire Analyst, Spotfire Server, and Spotfire for AWS Marketplace contains an easily exploitable vulnerability that allows a low…