Spotfire deployment kit

This hub aggregates every CVE we track for Spotfire deployment kit, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 8 most recently published vulnerabilities affecting Spotfire deployment kit.

• CVE-2025-3115Spotfire Data Function Vulnerability9.8Apr 9, 2025
• CVE-2019-17334TIBCO Spotfire Analyst and Desktop Remote Code Execution Via Shared Files8.0Dec 17, 2019
• CVE-2017-3180Multiple TIBCO Spotfire components fail to sanitize user-supplied inout and are vulnerable to cross-site scripting5.4Jul 24, 2018
• CVE-2017-3181Multiple TIBCO Spotfire components are vulnerable to multiple unspecified SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query9.8Jul 24, 2018
• CVE-2018-5435TIBCO Spotfire Product Family Remote Code Execution Vulnerability9.6Jun 27, 2018
• CVE-2018-5437TIBCO Spotfire Product Family Information Disclosure Vulnerability6.8Jun 27, 2018
• CVE-2015-4554Multiple unspecified vulnerabilities in TIBCO Spotfire Client and Spotfire Web Player Client in Spotfire Analyst before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x before 7.0.1; Spotfi...7.5Jul 21, 2015
• CVE-2014-7195Spotfire Web Player Engine in TIBCO Spotfire Web Player 6.0.x before 6.0.2 and 6.5.x before 6.5.2, Spotfire Deployment Kit 6.0.x before 6.0.2 and 6.5.x before 6.5.2, and Silver Fabric Enabler for S...4.0Nov 21, 2014