Spotfire Deployment Kit Used In Spotfire Server vulnerabilities

2 vulnerabilities

Known vulnerabilities in Spotfire Deployment Kit Used In Spotfire Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.4CVE-2025-3114spotfiredeployment kit used in spotfire server+5
EPSS score
0.61%
Code Execution via Malicious Files: Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise. Sandbox Bypass Vulnerability: A flaw in the TERR security mechanism allows attackers to bypass sandbox restrictions, enabling the execution of untrusted code without appropriate controls.9.8CVE-2025-3115spotfiredeployment kit used in spotfire server+12
EPSS score
0.68%
Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions. Additionally, insufficient validation of filenames during file uploads can enable attackers to upload and execute malicious files, leading to arbitrary code execution