{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2025-3115",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2025-3115",
    "idYear": 2025,
    "status": "PUBLISHED",
    "publishedAt": "2025-04-09T18:12:28.348Z",
    "updatedAt": "2025-11-11T11:47:58.064Z",
    "importedAt": "2026-10-24T01:57:34.152Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "Spotfire Data Function Vulnerability",
      "summary": "Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions.\nAdditionally, insufficient validation of filenames during file uploads can enable attackers to upload and execute malicious files, leading to arbitrary code execution",
      "affected": [
        {
          "vendor": "Spotfire",
          "product": "Spotfire Statistics Services",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "14",
              "status": "affected",
              "versionType": "Patch",
              "lessThan": "14.0.7"
            },
            {
              "version": "14.1.0",
              "status": "affected",
              "versionType": "Patch"
            },
            {
              "version": "14.2.0",
              "status": "affected",
              "versionType": "Patch"
            },
            {
              "version": "14.3.0",
              "status": "affected",
              "versionType": "Patch"
            },
            {
              "version": "14.4.0",
              "status": "affected",
              "versionType": "Patch"
            },
            {
              "version": "14.4.1",
              "status": "affected",
              "versionType": "Patch"
            }
          ]
        },
        {
          "vendor": "Spotfire",
          "product": "Spotfire Analyst",
          "defaultStatus": "unknown",
          "versions": [
            {
              "version": "14.0",
              "status": "affected",
              "versionType": "Patch",
              "lessThan": "14.0.6"
            },
            {
              "version": "14.1.0",
              "status": "affected",
              "versionType": "Patch"
            },
            {
              "version": "14.2.0",
              "status": "affected",
              "versionType": "Patch"
            },
            {
              "version": "14.3.0",
              "status": "affected",
              "versionType": "Patch"
            },
            {
              "version": "14.4.0",
              "status": "affected",
              "versionType": "Patch"
            },
            {
              "version": "14.4.1",
              "status": "affected",
              "versionType": "Patch"
            }
          ]
        },
        {
          "vendor": "Spotfire",
          "product": "Deployment Kit used in Spotfire Server",
          "defaultStatus": "unknown",
          "versions": [
            {
              "version": "14.0",
              "status": "affected",
              "versionType": "Patch",
              "lessThan": "14.0.7"
            },
            {
              "version": "14.1.0",
              "status": "affected",
              "versionType": "Patch"
            },
            {
              "version": "14.2.0",
              "status": "affected",
              "versionType": "Patch"
            },
            {
              "version": "14.3.0",
              "status": "affected",
              "versionType": "Patch"
            },
            {
              "version": "14.4.0",
              "status": "affected",
              "versionType": "Patch"
            },
            {
              "version": "14.4.1",
              "status": "affected",
              "versionType": "Patch"
            }
          ]
        },
        {
          "vendor": "Spotfire",
          "product": "Spotfire Desktop",
          "defaultStatus": "unknown",
          "versions": [
            {
              "version": "14.4",
              "status": "affected",
              "versionType": "Patch",
              "lessThan": "14.4.2"
            }
          ]
        },
        {
          "vendor": "Spotfire",
          "product": "Spotfire for AWS Marketplace",
          "defaultStatus": "unknown",
          "versions": [
            {
              "version": "14.4",
              "status": "unknown",
              "versionType": "Patch",
              "lessThan": "14.4.2"
            }
          ]
        },
        {
          "vendor": "Spotfire",
          "product": "Spotfire Enterprise Runtime for R - Server Edition",
          "defaultStatus": "unknown",
          "versions": [
            {
              "version": "1.17",
              "status": "affected",
              "versionType": "Patch",
              "lessThan": "1.17.7"
            },
            {
              "version": "1.18.0",
              "status": "affected",
              "versionType": "Patch"
            },
            {
              "version": "1.19.0",
              "status": "affected",
              "versionType": "Patch"
            },
            {
              "version": "1.20.0",
              "status": "affected",
              "versionType": "Patch"
            },
            {
              "version": "1.21.0",
              "status": "affected",
              "versionType": "Patch"
            },
            {
              "version": "1.21.1",
              "status": "affected",
              "versionType": "Patch"
            }
          ]
        },
        {
          "vendor": "Spotfire",
          "product": "Spotfire Service for Python",
          "defaultStatus": "unknown",
          "versions": [
            {
              "version": "1.17",
              "status": "affected",
              "versionType": "Patch",
              "lessThan": "1.17.7"
            },
            {
              "version": "1.18.0",
              "status": "affected",
              "versionType": "Patch",
              "lessThanOrEqual": "1.21.1"
            }
          ]
        },
        {
          "vendor": "Spotfire",
          "product": "Spotfire Service for R",
          "defaultStatus": "unknown",
          "versions": [
            {
              "version": "1.17",
              "status": "affected",
              "versionType": "Patch",
              "lessThan": "1.17.7"
            },
            {
              "version": "1.18.0",
              "status": "affected",
              "versionType": "Patch",
              "lessThanOrEqual": "1.21.1"
            }
          ]
        }
      ]
    }
  }
}