Advisories · Technology

Spotfire Statistics Services.

Every CVE that names Spotfire Statistics Services among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-3115 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Spotfire Data Function Vulnerability
- Spotfire Statistics Services
- Spotfire Analyst
- Code injection
Not analysed yet 9 Apr 2025
CVE-2025-3114 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Spotfire Code Execution Vulnerability
- Spotfire Enterprise Runtime for R
- Spotfire Statistics Services
- Code injection
- CWE-693
Not analysed yet 9 Apr 2025
CVE-2024-3331 CVE record

CVSS 6.8 Medium

Spotfire: NTLM token leakage
- Spotfire Enterprise Runtime for R - Server Edition
- Spotfire Statistics Services
- Broken access control
Not analysed yet 27 Jun 2024