CVSS 4.0
9.4 criticalCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:HCVE-2025-3115
Critical (9.4) in tibco. EPSS 0.7% chance of exploitation in the next 30 days.
Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions.
Additionally, insufficient validation of filenames during file uploads can enable attackers to upload and execute malicious files, leading to arbitrary code execution
Severity
CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
- CWE
- CWE-94
- Published
- Modified
- Record from
- the NVD, synced
Affected
- tibco:spotfire_analyst
- tibco:spotfire_analytics_platform
- tibco:spotfire_deployment_kit
- tibco:spotfire_desktop
- tibco:spotfire_enterprise_runtime_for_r
- tibco:spotfire_statistics_services