CVE-2025-3115

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2025
Source publication: Apr 9, 2025
Source updated: Nov 11, 2025
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Spotfire Data Function Vulnerability

Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions. Additionally, insufficient validation of filenames during file uploads can enable attackers to upload and execute malicious files, leading to arbitrary code execution

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Spotfire Statistics Services

Vendor: Spotfire
Product: Spotfire Statistics Services
Platforms: Unknown
Default status: unaffected

Spotfire Statistics Services · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
14	`affected`	Patch	14.0.7	Unavailable	None listed
14.1.0	`affected`	Patch	Unavailable	Unavailable	None listed
14.2.0	`affected`	Patch	Unavailable	Unavailable	None listed
14.3.0	`affected`	Patch	Unavailable	Unavailable	None listed
14.4.0	`affected`	Patch	Unavailable	Unavailable	None listed
14.4.1	`affected`	Patch	Unavailable	Unavailable	None listed

Spotfire Analyst

Vendor: Spotfire
Product: Spotfire Analyst
Platforms: Unknown
Default status: unknown

Spotfire Analyst · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
14.0	`affected`	Patch	14.0.6	Unavailable	None listed
14.1.0	`affected`	Patch	Unavailable	Unavailable	None listed
14.2.0	`affected`	Patch	Unavailable	Unavailable	None listed
14.3.0	`affected`	Patch	Unavailable	Unavailable	None listed
14.4.0	`affected`	Patch	Unavailable	Unavailable	None listed
14.4.1	`affected`	Patch	Unavailable	Unavailable	None listed

Deployment Kit used in Spotfire Server

Vendor: Spotfire
Product: Deployment Kit used in Spotfire Server
Platforms: Unknown
Default status: unknown

Deployment Kit used in Spotfire Server · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
14.0	`affected`	Patch	14.0.7	Unavailable	None listed
14.1.0	`affected`	Patch	Unavailable	Unavailable	None listed
14.2.0	`affected`	Patch	Unavailable	Unavailable	None listed
14.3.0	`affected`	Patch	Unavailable	Unavailable	None listed
14.4.0	`affected`	Patch	Unavailable	Unavailable	None listed
14.4.1	`affected`	Patch	Unavailable	Unavailable	None listed

Spotfire Desktop

Vendor: Spotfire
Product: Spotfire Desktop
Platforms: Unknown
Default status: unknown

Spotfire Desktop · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
14.4	`affected`	Patch	14.4.2	Unavailable	None listed

Spotfire for AWS Marketplace

Vendor: Spotfire
Product: Spotfire for AWS Marketplace
Platforms: Unknown
Default status: unknown

Spotfire for AWS Marketplace · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
14.4	`unknown`	Patch	14.4.2	Unavailable	None listed

Spotfire Enterprise Runtime for R - Server Edition

Vendor: Spotfire
Product: Spotfire Enterprise Runtime for R - Server Edition
Platforms: Unknown
Default status: unknown

Spotfire Enterprise Runtime for R - Server Edition · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.17	`affected`	Patch	1.17.7	Unavailable	None listed
1.18.0	`affected`	Patch	Unavailable	Unavailable	None listed
1.19.0	`affected`	Patch	Unavailable	Unavailable	None listed
1.20.0	`affected`	Patch	Unavailable	Unavailable	None listed
1.21.0	`affected`	Patch	Unavailable	Unavailable	None listed
1.21.1	`affected`	Patch	Unavailable	Unavailable	None listed

Spotfire Service for Python

Vendor: Spotfire
Product: Spotfire Service for Python
Platforms: Unknown
Default status: unknown

Spotfire Service for Python · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.17	`affected`	Patch	1.17.7	Unavailable	None listed
1.18.0	`affected`	Patch	Unavailable	1.21.1	None listed

Spotfire Service for R

Vendor: Spotfire
Product: Spotfire Service for R
Platforms: Unknown
Default status: unknown

Spotfire Service for R · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.17	`affected`	Patch	1.17.7	Unavailable	None listed
1.18.0	`affected`	Patch	Unavailable	1.21.1	None listed