Tibco Spotfire Statistics Services — known CVE vulnerabilities

Every CVE whose affected-product data names Tibco Spotfire Statistics Services, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2025-3115 — CVSS 9.8 (critical): Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions…
• CVE-2018-12410 — CVSS 9.8 (critical): The web server component of TIBCO Software Inc's Spotfire Statistics Services contains multiple vulnerabilities that may allow the remote…
• CVE-2023-29268 — CVSS 9.8 (critical): The Splus Server component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that allows an…
• CVE-2021-23275 — CVSS 8.8 (high): The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R…
• CVE-2019-11204 — CVSS 8.8 (high): The web interface component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that might theoretically…
• CVE-2021-28830 — CVSS 8.8 (high): The TIBCO Spotfire Server and TIBCO Enterprise Runtime for R components of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server…
• CVE-2013-2371 — CVSS 5.0 (medium): The Web API in the Statistics Server in TIBCO Spotfire Statistics Services 3.3.x before 3.3.1, 4.5.x before 4.5.1, and 5.0.x before 5.0.1…