Vendor
Spotfire
12 known vulnerabilities in products by Spotfire, 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-3115 | Spotfire Data Function Vulnerability | 9.8 | |
| Critical | CVE-2025-3114 | Spotfire Code Execution Vulnerability | — | |
| High | CVE-2026-8590 | Spotfire OAuth2 PKCE Bypass for public clients | — | |
| Critical | CVE-2024-3330 | Spotfire Remote Code Execution Vulnerability | 9.9 | |
| Medium | CVE-2024-3331 | Spotfire: NTLM token leakage | 6.8 | |
| Medium | CVE-2026-111193 | Spotfire Server: security vulnerability | — | |
| Medium | CVE-2026-111192 | Spotfire Server: security vulnerability | — | |
| Medium | CVE-2026-111196 | Spotfire Server: security vulnerability | — | |
| Medium | CVE-2026-111194 | Spotfire Server: security vulnerability | — | |
| Medium | CVE-2026-111195 | Spotfire Server: security vulnerability | — | |
| Medium | CVE-2026-111198 | Spotfire Server: security vulnerability | — | |
| Medium | CVE-2026-111197 | Spotfire Server: security vulnerability | — |
Products
| Server | 8 | 0 |
| Spotfire Analyst | 4 | 0 |
| Spotfire Desktop | 3 | 0 |
| Spotfire Enterprise Runtime For R - Server Edition | 3 | 0 |
| Spotfire Statistics Services | 3 | 0 |