Spotfire Analyst
Vendor:
First CVE: Jul 21, 2015 · Active for 11 years
12
Total CVEs
More Total CVEs than 91% of tracked products
1.5
Avg CVEs / Year
Higher CVE frequency than 59% of tracked products
7.0
Avg CVSS
Higher Avg CVSS than 45% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Spotfire Analyst over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 21, 2015
11 years ago
Most Recent CVE
Apr 9, 2025
475 days ago
CVE Severity & Scoring
Spotfire Analyst12 CVEs
8%
42%
25%
25%
All CVEs353,173 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local1 (8.3%)
Network10 (83.3%)
Unknown1 (8.3%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low11 (91.7%)
High0 (0.0%)
Unknown1 (8.3%)
User Interaction
None4 (33.3%)
Unknown1 (8.3%)
Required7 (58.3%)
Privileges Required
Low8 (66.7%)
High0 (0.0%)
None3 (25.0%)
Unknown1 (8.3%)
Top CVEs
Signals from CVEs in this product scope (12 CVEs).
12 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-5435CRITICAL The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TI | Jun 27, 2018 | 9.8 | 32 | NO | NO |
CVE-2017-3181CRITICAL Multiple TIBCO Products are prone to multiple unspecified SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query. E | Jul 24, 2018 | 9.8 | 31 | NO | NO |
CVE-2025-3115CRITICAL Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions.
Additionally, insufficient validation of file | Apr 9, 2025 | 9.8 | 29 | NO | NO |
CVE-2018-5437HIGH The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TI | Jun 27, 2018 | 8.8 | 27 | NO | NO |
CVE-2019-17334HIGH The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire D | Dec 17, 2019 | 8.0 | 24 | NO | NO |
CVE-2015-4554HIGH Multiple unspecified vulnerabilities in TIBCO Spotfire Client and Spotfire Web Player Client in Spotfire Analyst before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x bef | Jul 21, 2015 | 7.5 | 22 | NO | NO |
CVE-2017-3180MEDIUM Multiple TIBCO Products are prone to multiple unspecified cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage t | Jul 24, 2018 | 5.4 | 20 | NO | NO |
CVE-2022-41558MEDIUM The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, | Nov 15, 2022 | 5.4 | 19 | NO | NO |
CVE-2021-23273MEDIUM The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, and TIBCO Spotfire Ser | Mar 9, 2021 | 5.4 | 19 | NO | NO |
CVE-2020-9416MEDIUM The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, and TIBCO Spotfire Ser | Sep 15, 2020 | 5.4 | 19 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (12 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (12 CVEs).
Media Mentions
Signals from CVEs in this product scope (12 CVEs).
Top CNAs Publishing CVEs For Spotfire Analyst
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 7.9.1 | 2 | 9.5 | 2.5% | 0 | 0 |
| 7.9.0 | 2 | 9.5 | 2.5% | 0 | 0 |
| 7.7.0 | 2 | 7.6 | 1.2% | 0 | 0 |
| 7.6.0 | 1 | 5.4 | 0.6% | 0 | 0 |
| 7.5.0 | 1 | 5.4 | 0.6% | 0 | 0 |
| 7.14.0 | 1 | 8.0 | 1.0% | 0 | 0 |
| 7.13.0 | 1 | 8.0 | 1.0% | 0 | 0 |
| 7.12.0 | 3 | 9.1 | 2.1% | 0 | 0 |
| 7.11.0 | 2 | 9.5 | 2.5% | 0 | 0 |
| 7.10.1 | 2 | 9.5 | 2.5% | 0 | 0 |
| 7.10.0 | 2 | 9.5 | 2.5% | 0 | 0 |
| 7.0.0 | 1 | 7.5 | 3.5% | 0 | 0 |
| 6.5.2 | 1 | 7.5 | 3.5% | 0 | 0 |
| 6.5.1 | 1 | 7.5 | 3.5% | 0 | 0 |
| 6.5.0 | 1 | 7.5 | 3.5% | 0 | 0 |
| 6.0.2 | 1 | 7.5 | 3.5% | 0 | 0 |
| 6.0.1 | 1 | 7.5 | 3.5% | 0 | 0 |
| 6.0.0 | 1 | 7.5 | 3.5% | 0 | 0 |
| 14.4.1 | 1 | 9.8 | 0.6% | 0 | 0 |
| 14.4.0 | 1 | 9.8 | 0.6% | 0 | 0 |