Vulnerability Details CVE-2025-3115
Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions.
Additionally, insufficient validation of filenames during file uploads can enable attackers to upload and execute malicious files, leading to arbitrary code execution
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 30.3%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2025-3115
-
cpe:2.3:a:tibco:spotfire_analyst:10.0.0
-
cpe:2.3:a:tibco:spotfire_analyst:10.1.0
-
cpe:2.3:a:tibco:spotfire_analyst:10.10.0
-
cpe:2.3:a:tibco:spotfire_analyst:10.10.1
-
cpe:2.3:a:tibco:spotfire_analyst:10.10.2
-
cpe:2.3:a:tibco:spotfire_analyst:10.2.0
-
cpe:2.3:a:tibco:spotfire_analyst:10.3.0
-
cpe:2.3:a:tibco:spotfire_analyst:10.3.1
-
cpe:2.3:a:tibco:spotfire_analyst:10.3.2
-
cpe:2.3:a:tibco:spotfire_analyst:10.3.3
-
cpe:2.3:a:tibco:spotfire_analyst:10.4.0
-
cpe:2.3:a:tibco:spotfire_analyst:10.5.0
-
cpe:2.3:a:tibco:spotfire_analyst:10.6.0
-
cpe:2.3:a:tibco:spotfire_analyst:10.6.1
-
cpe:2.3:a:tibco:spotfire_analyst:10.7.0
-
cpe:2.3:a:tibco:spotfire_analyst:10.8.0
-
cpe:2.3:a:tibco:spotfire_analyst:10.9.0
-
cpe:2.3:a:tibco:spotfire_analyst:11.0.0
-
cpe:2.3:a:tibco:spotfire_analyst:11.1.0
-
cpe:2.3:a:tibco:spotfire_analyst:11.4.4
-
cpe:2.3:a:tibco:spotfire_analyst:11.4.5
-
cpe:2.3:a:tibco:spotfire_analyst:11.4.7
-
cpe:2.3:a:tibco:spotfire_analyst:11.5.0
-
cpe:2.3:a:tibco:spotfire_analyst:11.6.0
-
cpe:2.3:a:tibco:spotfire_analyst:11.7.0
-
cpe:2.3:a:tibco:spotfire_analyst:11.8.0
-
cpe:2.3:a:tibco:spotfire_analyst:12.0.0
-
cpe:2.3:a:tibco:spotfire_analyst:12.0.1
-
cpe:2.3:a:tibco:spotfire_analyst:12.0.2
-
cpe:2.3:a:tibco:spotfire_analyst:12.0.3
-
cpe:2.3:a:tibco:spotfire_analyst:12.0.4
-
cpe:2.3:a:tibco:spotfire_analyst:12.1.0
-
cpe:2.3:a:tibco:spotfire_analyst:12.1.1
-
cpe:2.3:a:tibco:spotfire_analyst:12.3.0
-
cpe:2.3:a:tibco:spotfire_analyst:12.4.0
-
cpe:2.3:a:tibco:spotfire_analyst:12.5.0
-
cpe:2.3:a:tibco:spotfire_analyst:14.1.0
-
cpe:2.3:a:tibco:spotfire_analyst:14.2.0
-
cpe:2.3:a:tibco:spotfire_analyst:14.3.0
-
cpe:2.3:a:tibco:spotfire_analyst:14.4.0
-
cpe:2.3:a:tibco:spotfire_analyst:14.4.1
-
cpe:2.3:a:tibco:spotfire_analyst:5.5.1
-
cpe:2.3:a:tibco:spotfire_analyst:6.0.0
-
cpe:2.3:a:tibco:spotfire_analyst:6.0.1
-
cpe:2.3:a:tibco:spotfire_analyst:6.0.2
-
cpe:2.3:a:tibco:spotfire_analyst:6.5.0
-
cpe:2.3:a:tibco:spotfire_analyst:6.5.1
-
cpe:2.3:a:tibco:spotfire_analyst:6.5.2
-
cpe:2.3:a:tibco:spotfire_analyst:7.0.0
-
cpe:2.3:a:tibco:spotfire_analyst:7.10.0
-
cpe:2.3:a:tibco:spotfire_analyst:7.10.1
-
cpe:2.3:a:tibco:spotfire_analyst:7.10.2
-
cpe:2.3:a:tibco:spotfire_analyst:7.11.0
-
cpe:2.3:a:tibco:spotfire_analyst:7.11.1
-
cpe:2.3:a:tibco:spotfire_analyst:7.11.2
-
cpe:2.3:a:tibco:spotfire_analyst:7.12.0
-
cpe:2.3:a:tibco:spotfire_analyst:7.13.0
-
cpe:2.3:a:tibco:spotfire_analyst:7.14.0
-
cpe:2.3:a:tibco:spotfire_analyst:7.5.0
-
cpe:2.3:a:tibco:spotfire_analyst:7.5.1
-
cpe:2.3:a:tibco:spotfire_analyst:7.6.0
-
cpe:2.3:a:tibco:spotfire_analyst:7.6.1
-
cpe:2.3:a:tibco:spotfire_analyst:7.7.0
-
cpe:2.3:a:tibco:spotfire_analyst:7.7.1
-
cpe:2.3:a:tibco:spotfire_analyst:7.8.0
-
cpe:2.3:a:tibco:spotfire_analyst:7.8.1
-
cpe:2.3:a:tibco:spotfire_analyst:7.9.0
-
cpe:2.3:a:tibco:spotfire_analyst:7.9.1
-
cpe:2.3:a:tibco:spotfire_analyst:7.9.2
-
cpe:2.3:a:tibco:spotfire_analytics_platform:10.10.0
-
cpe:2.3:a:tibco:spotfire_analytics_platform:10.10.1
-
cpe:2.3:a:tibco:spotfire_analytics_platform:10.7.0
-
cpe:2.3:a:tibco:spotfire_analytics_platform:10.8.0
-
cpe:2.3:a:tibco:spotfire_analytics_platform:10.8.1
-
cpe:2.3:a:tibco:spotfire_analytics_platform:10.9.0
-
cpe:2.3:a:tibco:spotfire_analytics_platform:11.3.0
-
cpe:2.3:a:tibco:spotfire_analytics_platform:11.4.0
-
cpe:2.3:a:tibco:spotfire_analytics_platform:12.0.0
-
cpe:2.3:a:tibco:spotfire_analytics_platform:12.5.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:-
-
cpe:2.3:a:tibco:spotfire_deployment_kit:10.0.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:10.1.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:10.2.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:14.1.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:14.2.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:14.3.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:14.4.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:14.4.1
-
cpe:2.3:a:tibco:spotfire_deployment_kit:2.2.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:3.0.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:3.1.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:3.1.1
-
cpe:2.3:a:tibco:spotfire_deployment_kit:3.2.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:3.2.1
-
cpe:2.3:a:tibco:spotfire_deployment_kit:3.2.2
-
cpe:2.3:a:tibco:spotfire_deployment_kit:3.3.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:3.3.1
-
cpe:2.3:a:tibco:spotfire_deployment_kit:3.3.2
-
cpe:2.3:a:tibco:spotfire_deployment_kit:4.0.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:4.0.1
-
cpe:2.3:a:tibco:spotfire_deployment_kit:4.0.2
-
cpe:2.3:a:tibco:spotfire_deployment_kit:4.0.3
-
cpe:2.3:a:tibco:spotfire_deployment_kit:4.0.4
-
cpe:2.3:a:tibco:spotfire_deployment_kit:4.5.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:4.5.2
-
cpe:2.3:a:tibco:spotfire_deployment_kit:5.0.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:5.0.2
-
cpe:2.3:a:tibco:spotfire_deployment_kit:5.5.1
-
cpe:2.3:a:tibco:spotfire_deployment_kit:6.0.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:6.0.1
-
cpe:2.3:a:tibco:spotfire_deployment_kit:6.0.2
-
cpe:2.3:a:tibco:spotfire_deployment_kit:6.5.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:6.5.1
-
cpe:2.3:a:tibco:spotfire_deployment_kit:6.5.2
-
cpe:2.3:a:tibco:spotfire_deployment_kit:6.5.3
-
cpe:2.3:a:tibco:spotfire_deployment_kit:6.5.4
-
cpe:2.3:a:tibco:spotfire_deployment_kit:7.0.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:7.0.1
-
cpe:2.3:a:tibco:spotfire_deployment_kit:7.0.2
-
cpe:2.3:a:tibco:spotfire_deployment_kit:7.10.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:7.10.1
-
cpe:2.3:a:tibco:spotfire_deployment_kit:7.10.2
-
cpe:2.3:a:tibco:spotfire_deployment_kit:7.11.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:7.11.1
-
cpe:2.3:a:tibco:spotfire_deployment_kit:7.12.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:7.13.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:7.14.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:7.5.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:7.5.1
-
cpe:2.3:a:tibco:spotfire_deployment_kit:7.6.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:7.6.1
-
cpe:2.3:a:tibco:spotfire_deployment_kit:7.7.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:7.7.1
-
cpe:2.3:a:tibco:spotfire_deployment_kit:7.8.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:7.8.1
-
cpe:2.3:a:tibco:spotfire_deployment_kit:7.9.0
-
cpe:2.3:a:tibco:spotfire_deployment_kit:7.9.1
-
cpe:2.3:a:tibco:spotfire_deployment_kit:7.9.2
-
cpe:2.3:a:tibco:spotfire_desktop:-
-
cpe:2.3:a:tibco:spotfire_desktop:10.0.0
-
cpe:2.3:a:tibco:spotfire_desktop:10.1.0
-
cpe:2.3:a:tibco:spotfire_desktop:10.10.0
-
cpe:2.3:a:tibco:spotfire_desktop:10.10.1
-
cpe:2.3:a:tibco:spotfire_desktop:10.10.2
-
cpe:2.3:a:tibco:spotfire_desktop:10.2.0
-
cpe:2.3:a:tibco:spotfire_desktop:10.3.0
-
cpe:2.3:a:tibco:spotfire_desktop:10.3.1
-
cpe:2.3:a:tibco:spotfire_desktop:10.3.2
-
cpe:2.3:a:tibco:spotfire_desktop:10.3.3
-
cpe:2.3:a:tibco:spotfire_desktop:10.4.0
-
cpe:2.3:a:tibco:spotfire_desktop:10.5.0
-
cpe:2.3:a:tibco:spotfire_desktop:10.6.0
-
cpe:2.3:a:tibco:spotfire_desktop:10.6.1
-
cpe:2.3:a:tibco:spotfire_desktop:10.7.0
-
cpe:2.3:a:tibco:spotfire_desktop:10.8.0
-
cpe:2.3:a:tibco:spotfire_desktop:10.9.0
-
cpe:2.3:a:tibco:spotfire_desktop:11.0.0
-
cpe:2.3:a:tibco:spotfire_desktop:11.1.0
-
cpe:2.3:a:tibco:spotfire_desktop:11.4.4
-
cpe:2.3:a:tibco:spotfire_desktop:11.4.5
-
cpe:2.3:a:tibco:spotfire_desktop:11.5.0
-
cpe:2.3:a:tibco:spotfire_desktop:11.6.0
-
cpe:2.3:a:tibco:spotfire_desktop:11.7.0
-
cpe:2.3:a:tibco:spotfire_desktop:11.8.0
-
cpe:2.3:a:tibco:spotfire_desktop:12.0.0
-
cpe:2.3:a:tibco:spotfire_desktop:12.0.1
-
cpe:2.3:a:tibco:spotfire_desktop:12.0.2
-
cpe:2.3:a:tibco:spotfire_desktop:12.1.0
-
cpe:2.3:a:tibco:spotfire_desktop:12.1.1
-
cpe:2.3:a:tibco:spotfire_desktop:6.5.1
-
cpe:2.3:a:tibco:spotfire_desktop:6.5.2
-
cpe:2.3:a:tibco:spotfire_desktop:7.0.0
-
cpe:2.3:a:tibco:spotfire_desktop:7.0.1
-
cpe:2.3:a:tibco:spotfire_desktop:7.0.2
-
cpe:2.3:a:tibco:spotfire_desktop:7.10.0
-
cpe:2.3:a:tibco:spotfire_desktop:7.10.1
-
cpe:2.3:a:tibco:spotfire_desktop:7.10.2
-
cpe:2.3:a:tibco:spotfire_desktop:7.11.0
-
cpe:2.3:a:tibco:spotfire_desktop:7.11.1
-
cpe:2.3:a:tibco:spotfire_desktop:7.11.2
-
cpe:2.3:a:tibco:spotfire_desktop:7.12.0
-
cpe:2.3:a:tibco:spotfire_desktop:7.13.0
-
cpe:2.3:a:tibco:spotfire_desktop:7.14.0
-
cpe:2.3:a:tibco:spotfire_desktop:7.5.0
-
cpe:2.3:a:tibco:spotfire_desktop:7.5.1
-
cpe:2.3:a:tibco:spotfire_desktop:7.6.0
-
cpe:2.3:a:tibco:spotfire_desktop:7.6.1
-
cpe:2.3:a:tibco:spotfire_desktop:7.7.0
-
cpe:2.3:a:tibco:spotfire_desktop:7.7.1
-
cpe:2.3:a:tibco:spotfire_desktop:7.8.0
-
cpe:2.3:a:tibco:spotfire_desktop:7.8.1
-
cpe:2.3:a:tibco:spotfire_desktop:7.9.0
-
cpe:2.3:a:tibco:spotfire_desktop:7.9.1
-
cpe:2.3:a:tibco:spotfire_desktop:7.9.2
-
cpe:2.3:a:tibco:spotfire_enterprise_runtime_for_r:*
-
cpe:2.3:a:tibco:spotfire_enterprise_runtime_for_r:1.18.0
-
cpe:2.3:a:tibco:spotfire_enterprise_runtime_for_r:1.19.0
-
cpe:2.3:a:tibco:spotfire_enterprise_runtime_for_r:1.20.0
-
cpe:2.3:a:tibco:spotfire_enterprise_runtime_for_r:1.21.0
-
cpe:2.3:a:tibco:spotfire_enterprise_runtime_for_r:1.21.1
-
cpe:2.3:a:tibco:spotfire_statistics_services:-
-
cpe:2.3:a:tibco:spotfire_statistics_services:10.0.0
-
cpe:2.3:a:tibco:spotfire_statistics_services:10.0.1
-
cpe:2.3:a:tibco:spotfire_statistics_services:10.10.0
-
cpe:2.3:a:tibco:spotfire_statistics_services:10.10.1
-
cpe:2.3:a:tibco:spotfire_statistics_services:10.10.2
-
cpe:2.3:a:tibco:spotfire_statistics_services:10.3.0
-
cpe:2.3:a:tibco:spotfire_statistics_services:10.3.1
-
cpe:2.3:a:tibco:spotfire_statistics_services:11.1.0
-
cpe:2.3:a:tibco:spotfire_statistics_services:11.2.0
-
cpe:2.3:a:tibco:spotfire_statistics_services:11.3.0
-
cpe:2.3:a:tibco:spotfire_statistics_services:11.4.10
-
cpe:2.3:a:tibco:spotfire_statistics_services:11.4.11
-
cpe:2.3:a:tibco:spotfire_statistics_services:11.5.0
-
cpe:2.3:a:tibco:spotfire_statistics_services:11.6.0
-
cpe:2.3:a:tibco:spotfire_statistics_services:11.6.1
-
cpe:2.3:a:tibco:spotfire_statistics_services:11.6.2
-
cpe:2.3:a:tibco:spotfire_statistics_services:11.7.0
-
cpe:2.3:a:tibco:spotfire_statistics_services:11.8.0
-
cpe:2.3:a:tibco:spotfire_statistics_services:11.8.1
-
cpe:2.3:a:tibco:spotfire_statistics_services:12.0.0
-
cpe:2.3:a:tibco:spotfire_statistics_services:12.0.1
-
cpe:2.3:a:tibco:spotfire_statistics_services:12.0.2
-
cpe:2.3:a:tibco:spotfire_statistics_services:12.1.0
-
cpe:2.3:a:tibco:spotfire_statistics_services:12.2.0
-
cpe:2.3:a:tibco:spotfire_statistics_services:14.1.0
-
cpe:2.3:a:tibco:spotfire_statistics_services:14.2.0
-
cpe:2.3:a:tibco:spotfire_statistics_services:14.3.0
-
cpe:2.3:a:tibco:spotfire_statistics_services:14.4.0
-
cpe:2.3:a:tibco:spotfire_statistics_services:14.4.1
-
cpe:2.3:a:tibco:spotfire_statistics_services:3.3
-
cpe:2.3:a:tibco:spotfire_statistics_services:4.5.0
-
cpe:2.3:a:tibco:spotfire_statistics_services:5.0.0
-
cpe:2.3:a:tibco:spotfire_statistics_services:7.11.0
-
cpe:2.3:a:tibco:spotfire_statistics_services:7.11.1
-
cpe:2.3:a:tibco:spotfire_statistics_services:7.11.2