TIBCO Spotfire Statistics Services vulnerabilities

7 CVEs affecting TIBCO Spotfire Statistics Services, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-3115, published 2025-04-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-12410, published 2018-10-10. Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days. The web server component of TIBCO Software Inc's Spotfire Statistics Services contains multiple vulnerabilities that may allow the remote execution of code. Without needing to authenticate, an…
CVE-2013-2371, published 2013-03-15. Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days. The Web API in the Statistics Server in TIBCO Spotfire Statistics Services 3.3.x before 3.3.1, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 allows remote attackers to obtain sensitive information via…
CVE-2019-11204, published 2019-05-14. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. The web interface component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that might theoretically allow an authenticated user to access sensitive information…
CVE-2023-29268, published 2023-04-26. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. The Splus Server component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that allows an unauthenticated remote attacker to upload or modify arbitrary files…
CVE-2025-3115, published 2025-04-09. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions. Additionally, insufficient validation of filenames during file…
CVE-2021-28830, published 2021-06-29. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. The TIBCO Spotfire Server and TIBCO Enterprise Runtime for R components of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition,…
CVE-2021-23275, published 2021-06-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server…