SD
Product
Spotfire Deployment Kit
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 1Low 0
Watch
Add Spotfire Deployment Kit to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-3115 | 9.8 | Apr 9 | Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions Affected: before 14.0.7; 14.1.0; 14.2.0; 14.3.0; 14.4.0; 14.4.1 |
| CVE-2017-3181 | 9.8 | Jul 24 | Multiple TIBCO Products are prone to multiple unspecified SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query Affected: 7.7.0 |
| CVE-2018-5435 | 9.8 | Jun 27 | The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace,… Affected: through 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0; +8 more |
| CVE-2018-5437 | 8.8 | Jun 27 | The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace,… Affected: through 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0; +1 more |
| CVE-2019-17334 | 8.0 | Dec 17 | The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire… Affected: through 7.11.1 |
| CVE-2017-3180 | 5.4 | Jul 24 | Multiple TIBCO Products are prone to multiple unspecified cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input Affected: through 6.5.3; 7.0.0; 7.0.1; 7.5.0; 7.6.0; 7.7.0 |
| CVE-2015-4554 | – | Jul 21 | Multiple unspecified vulnerabilities in TIBCO Spotfire Client and Spotfire Web Player Client in Spotfire Analyst before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x… Affected: through 5.5.1; 6.0.0; 6.0.1; 6.0.2; 6.5.0; 6.5.1; +2 more |
| CVE-2014-7195 | – | Nov 21 | Spotfire Web Player Engine in TIBCO Spotfire Web Player 6.0.x before 6.0.2 and 6.5.x before 6.5.2, Spotfire Deployment Kit 6.0.x before 6.0.2 and 6.5.x before 6.5.2, and Silver… Affected: 6.0.0; 6.0.1; 6.5.0; 6.5.1 |
Showing 8