cveboard RSS feed

CVE-2025-3114

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2025
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Spotfire Code Execution Vulnerability

Code Execution via Malicious Files: Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise. Sandbox Bypass Vulnerability: A flaw in the TERR security mechanism allows attackers to bypass sandbox restrictions, enabling the execution of untrusted code without appropriate controls.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Spotfire Enterprise Runtime for R

Vendor
Spotfire
Product
Spotfire Enterprise Runtime for R
Platforms
Unknown
Default status
unaffected
Spotfire Enterprise Runtime for R · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
6affectedPatchUnavailable1.4None listed

Spotfire Statistics Services

Vendor
Spotfire
Product
Spotfire Statistics Services
Platforms
Unknown
Default status
unaffected
Spotfire Statistics Services · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
14affectedPatchUnavailable0.6None listed
14.1.0affectedUnavailableUnavailableUnavailableNone listed
14.2.0affectedUnavailableUnavailableUnavailableNone listed
14.3.0affectedUnavailableUnavailableUnavailableNone listed
14.4.0affectedUnavailableUnavailableUnavailableNone listed
14.4.1affectedUnavailableUnavailableUnavailableNone listed

Spotfire Analyst

Vendor
Spotfire
Product
Spotfire Analyst
Platforms
Unknown
Default status
unknown
Spotfire Analyst · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
14affectedPatchUnavailable0.5None listed
14.1.0affectedPatchUnavailableUnavailableNone listed
14.2.0affectedPatchUnavailableUnavailableNone listed
14.3.0affectedPatchUnavailableUnavailableNone listed
14.4.0affectedPatchUnavailableUnavailableNone listed
14.4.1affectedPatchUnavailableUnavailableNone listed

Deployment Kit used in Spotfire Server

Vendor
Spotfire
Product
Deployment Kit used in Spotfire Server
Platforms
Unknown
Default status
unknown
Deployment Kit used in Spotfire Server · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
14affectedPatchUnavailable0.6None listed
14.1.0affectedPatchUnavailableUnavailableNone listed
14.2.0affectedPatchUnavailableUnavailableNone listed
14.3.0affectedPatchUnavailableUnavailableNone listed
14.4.0affectedPatchUnavailableUnavailableNone listed
14.4.1affectedPatchUnavailableUnavailableNone listed

Spotfire Desktop

Vendor
Spotfire
Product
Spotfire Desktop
Platforms
Unknown
Default status
unaffected
Spotfire Desktop · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
14affectedPatchUnavailable4.1None listed

Spotfire for AWS Marketplace

Vendor
Spotfire
Product
Spotfire for AWS Marketplace
Platforms
Unknown
Default status
unknown
Spotfire for AWS Marketplace · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
14unknownPatchUnavailable4.1None listed

Spotfire Enterprise Runtime for R - Server Edition

Vendor
Spotfire
Product
Spotfire Enterprise Runtime for R - Server Edition
Platforms
Unknown
Default status
unknown
Spotfire Enterprise Runtime for R - Server Edition · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
1affectedPatchUnavailable17.6None listed
1.18.0affectedPatchUnavailableUnavailableNone listed
1.19.0affectedPatchUnavailableUnavailableNone listed
1.20.0affectedPatchUnavailableUnavailableNone listed
1.21.0affectedPatchUnavailableUnavailableNone listed
1.21.1affectedPatchUnavailableUnavailableNone listed