cvelistv5 - cve-2025-3114

CVE-2025-3114 (GCVE-0-2025-3114)

Vulnerability from cvelistv5 – Published: 2025-04-09 17:29 – Updated: 2025-04-15 20:29

Summary

Code Execution via Malicious Files: Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise. Sandbox Bypass Vulnerability: A flaw in the TERR security mechanism allows attackers to bypass sandbox restrictions, enabling the execution of untrusted code without appropriate controls.

Severity ?

9.4 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

CWE

CWE-94 - Improper Control of Generation of Code ('Code Injection')
CWE-693 - Protection Mechanism Failure

Assigner

tibco

References

URL

Tags

https://community.spotfire.com/articles/spotfire/…

Impacted products

Vendor

Product

Version

Spotfire

Spotfire Enterprise Runtime for R

Affected: 6 , ≤ 1.4 (Patch)

Spotfire	Spotfire Statistics Services	Affected: 14 , ≤ 0.6 (Patch) Affected: 14.1.0 Affected: 14.2.0 Affected: 14.3.0 Affected: 14.4.0 Affected: 14.4.1
Spotfire	Spotfire Analyst	Affected: 14 , ≤ 0.5 (Patch) Affected: 14.1.0 (Patch) Affected: 14.2.0 (Patch) Affected: 14.3.0 (Patch) Affected: 14.4.0 (Patch) Affected: 14.4.1 (Patch)
Spotfire	Deployment Kit used in Spotfire Server	Affected: 14 , ≤ 0.6 (Patch) Affected: 14.1.0 (Patch) Affected: 14.2.0 (Patch) Affected: 14.3.0 (Patch) Affected: 14.4.0 (Patch) Affected: 14.4.1 (Patch)
Spotfire	Spotfire Desktop	Affected: 14 , ≤ 4.1 (Patch)
Spotfire	Spotfire for AWS Marketplace	Unknown: 14 , ≤ 4.1 (Patch)
Spotfire	Spotfire Enterprise Runtime for R - Server Edition	Affected: 1 , ≤ 17.6 (Patch) Affected: 1.18.0 (Patch) Affected: 1.19.0 (Patch) Affected: 1.20.0 (Patch) Affected: 1.21.0 (Patch) Affected: 1.21.1 (Patch)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-3114",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-09T18:03:07.615805Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-94",
                "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          },
          {
            "descriptions": [
              {
                "cweId": "CWE-693",
                "description": "CWE-693 Protection Mechanism Failure",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-15T20:29:11.223Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Spotfire Enterprise Runtime for R",
          "vendor": "Spotfire",
          "versions": [
            {
              "lessThanOrEqual": "1.4",
              "status": "affected",
              "version": "6",
              "versionType": "Patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Spotfire Statistics Services",
          "vendor": "Spotfire",
          "versions": [
            {
              "lessThanOrEqual": "0.6",
              "status": "affected",
              "version": "14",
              "versionType": "Patch"
            },
            {
              "status": "affected",
              "version": "14.1.0"
            },
            {
              "status": "affected",
              "version": "14.2.0"
            },
            {
              "status": "affected",
              "version": "14.3.0"
            },
            {
              "status": "affected",
              "version": "14.4.0"
            },
            {
              "status": "affected",
              "version": "14.4.1"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Spotfire Analyst",
          "vendor": "Spotfire",
          "versions": [
            {
              "lessThanOrEqual": "0.5",
              "status": "affected",
              "version": "14",
              "versionType": "Patch"
            },
            {
              "status": "affected",
              "version": "14.1.0",
              "versionType": "Patch"
            },
            {
              "status": "affected",
              "version": "14.2.0",
              "versionType": "Patch"
            },
            {
              "status": "affected",
              "version": "14.3.0",
              "versionType": "Patch"
            },
            {
              "status": "affected",
              "version": "14.4.0",
              "versionType": "Patch"
            },
            {
              "status": "affected",
              "version": "14.4.1",
              "versionType": "Patch"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Deployment Kit used in Spotfire Server",
          "vendor": "Spotfire",
          "versions": [
            {
              "lessThanOrEqual": "0.6",
              "status": "affected",
              "version": "14",
              "versionType": "Patch"
            },
            {
              "status": "affected",
              "version": "14.1.0",
              "versionType": "Patch"
            },
            {
              "status": "affected",
              "version": "14.2.0",
              "versionType": "Patch"
            },
            {
              "status": "affected",
              "version": "14.3.0",
              "versionType": "Patch"
            },
            {
              "status": "affected",
              "version": "14.4.0",
              "versionType": "Patch"
            },
            {
              "status": "affected",
              "version": "14.4.1",
              "versionType": "Patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Spotfire Desktop",
          "vendor": "Spotfire",
          "versions": [
            {
              "lessThanOrEqual": "4.1",
              "status": "affected",
              "version": "14",
              "versionType": "Patch"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Spotfire for AWS Marketplace",
          "vendor": "Spotfire",
          "versions": [
            {
              "lessThanOrEqual": "4.1",
              "status": "unknown",
              "version": "14",
              "versionType": "Patch"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Spotfire Enterprise Runtime for R - Server Edition",
          "vendor": "Spotfire",
          "versions": [
            {
              "lessThanOrEqual": "17.6",
              "status": "affected",
              "version": "1",
              "versionType": "Patch"
            },
            {
              "status": "affected",
              "version": "1.18.0",
              "versionType": "Patch"
            },
            {
              "status": "affected",
              "version": "1.19.0",
              "versionType": "Patch"
            },
            {
              "status": "affected",
              "version": "1.20.0",
              "versionType": "Patch"
            },
            {
              "status": "affected",
              "version": "1.21.0",
              "versionType": "Patch"
            },
            {
              "status": "affected",
              "version": "1.21.1",
              "versionType": "Patch"
            }
          ]
        }
      ],
      "datePublic": "2025-04-08T16:30:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cstrong\u003eCode Execution via Malicious Files:\u003c/strong\u003e\u0026nbsp;Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise.\u003c/p\u003e\u003cp\u003e\u003cstrong\u003eSandbox Bypass Vulnerability:\u003c/strong\u003e\u0026nbsp;A flaw in the TERR security mechanism allows attackers to bypass sandbox restrictions, enabling the execution of untrusted code without appropriate controls.\u003c/p\u003e"
            }
          ],
          "value": "Code Execution via Malicious Files:\u00a0Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise.\n\nSandbox Bypass Vulnerability:\u00a0A flaw in the TERR security mechanism allows attackers to bypass sandbox restrictions, enabling the execution of untrusted code without appropriate controls."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.4,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-04-09T17:29:48.612Z",
        "orgId": "4f830c72-39e4-45f6-a99f-78cc01ae04db",
        "shortName": "tibco"
      },
      "references": [
        {
          "url": "https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-april-08-2025-spotfire-cve-2025-3114-r3484/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Spotfire Code Execution Vulnerability",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4f830c72-39e4-45f6-a99f-78cc01ae04db",
    "assignerShortName": "tibco",
    "cveId": "CVE-2025-3114",
    "datePublished": "2025-04-09T17:29:48.612Z",
    "dateReserved": "2025-04-02T10:55:41.023Z",
    "dateUpdated": "2025-04-15T20:29:11.223Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-3114\",\"sourceIdentifier\":\"security@tibco.com\",\"published\":\"2025-04-09T18:15:50.643\",\"lastModified\":\"2025-04-15T21:16:04.847\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Code Execution via Malicious Files:\u00a0Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise.\\n\\nSandbox Bypass Vulnerability:\u00a0A flaw in the TERR security mechanism allows attackers to bypass sandbox restrictions, enabling the execution of untrusted code without appropriate controls.\"},{\"lang\":\"es\",\"value\":\"Ejecuci\u00f3n de c\u00f3digo mediante archivos maliciosos: Los atacantes pueden crear archivos especialmente manipulados con c\u00f3digo incrustado que puede ejecutarse sin la validaci\u00f3n de seguridad adecuada, lo que podr\u00eda comprometer el sistema. Vulnerabilidad de elusi\u00f3n de la zona de pruebas: Una falla en el mecanismo de seguridad TERR permite a los atacantes eludir las restricciones de la zona de pruebas, lo que permite la ejecuci\u00f3n de c\u00f3digo no confiable sin los controles adecuados.\"}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"security@tibco.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":9.4,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"HIGH\",\"subIntegrityImpact\":\"HIGH\",\"subAvailabilityImpact\":\"HIGH\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}]},\"weaknesses\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-94\"},{\"lang\":\"en\",\"value\":\"CWE-693\"}]}],\"references\":[{\"url\":\"https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-april-08-2025-spotfire-cve-2025-3114-r3484/\",\"source\":\"security@tibco.com\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-3114\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-04-09T18:03:07.615805Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-94\", \"description\": \"CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)\"}]}, {\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-693\", \"description\": \"CWE-693 Protection Mechanism Failure\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-04-09T18:14:43.893Z\"}}], \"cna\": {\"title\": \"Spotfire Code Execution Vulnerability\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"format\": \"CVSS\", \"cvssV4_0\": {\"Safety\": \"NOT_DEFINED\", \"version\": \"4.0\", \"Recovery\": \"NOT_DEFINED\", \"baseScore\": 9.4, \"Automatable\": \"NOT_DEFINED\", \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"valueDensity\": \"NOT_DEFINED\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H\", \"providerUrgency\": \"NOT_DEFINED\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"LOW\", \"subIntegrityImpact\": \"HIGH\", \"vulnIntegrityImpact\": \"HIGH\", \"subAvailabilityImpact\": \"HIGH\", \"vulnAvailabilityImpact\": \"HIGH\", \"subConfidentialityImpact\": \"HIGH\", \"vulnConfidentialityImpact\": \"HIGH\", \"vulnerabilityResponseEffort\": \"NOT_DEFINED\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Spotfire\", \"product\": \"Spotfire Enterprise Runtime for R\", \"versions\": [{\"status\": \"affected\", \"version\": \"6\", \"versionType\": \"Patch\", \"lessThanOrEqual\": \"1.4\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Spotfire\", \"product\": \"Spotfire Statistics Services\", \"versions\": [{\"status\": \"affected\", \"version\": \"14\", \"versionType\": \"Patch\", \"lessThanOrEqual\": \"0.6\"}, {\"status\": \"affected\", \"version\": \"14.1.0\"}, {\"status\": \"affected\", \"version\": \"14.2.0\"}, {\"status\": \"affected\", \"version\": \"14.3.0\"}, {\"status\": \"affected\", \"version\": \"14.4.0\"}, {\"status\": \"affected\", \"version\": \"14.4.1\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Spotfire\", \"product\": \"Spotfire Analyst\", \"versions\": [{\"status\": \"affected\", \"version\": \"14\", \"versionType\": \"Patch\", \"lessThanOrEqual\": \"0.5\"}, {\"status\": \"affected\", \"version\": \"14.1.0\", \"versionType\": \"Patch\"}, {\"status\": \"affected\", \"version\": \"14.2.0\", \"versionType\": \"Patch\"}, {\"status\": \"affected\", \"version\": \"14.3.0\", \"versionType\": \"Patch\"}, {\"status\": \"affected\", \"version\": \"14.4.0\", \"versionType\": \"Patch\"}, {\"status\": \"affected\", \"version\": \"14.4.1\", \"versionType\": \"Patch\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Spotfire\", \"product\": \"Deployment Kit used in Spotfire Server\", \"versions\": [{\"status\": \"affected\", \"version\": \"14\", \"versionType\": \"Patch\", \"lessThanOrEqual\": \"0.6\"}, {\"status\": \"affected\", \"version\": \"14.1.0\", \"versionType\": \"Patch\"}, {\"status\": \"affected\", \"version\": \"14.2.0\", \"versionType\": \"Patch\"}, {\"status\": \"affected\", \"version\": \"14.3.0\", \"versionType\": \"Patch\"}, {\"status\": \"affected\", \"version\": \"14.4.0\", \"versionType\": \"Patch\"}, {\"status\": \"affected\", \"version\": \"14.4.1\", \"versionType\": \"Patch\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Spotfire\", \"product\": \"Spotfire Desktop\", \"versions\": [{\"status\": \"affected\", \"version\": \"14\", \"versionType\": \"Patch\", \"lessThanOrEqual\": \"4.1\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Spotfire\", \"product\": \"Spotfire for AWS Marketplace\", \"versions\": [{\"status\": \"unknown\", \"version\": \"14\", \"versionType\": \"Patch\", \"lessThanOrEqual\": \"4.1\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Spotfire\", \"product\": \"Spotfire Enterprise Runtime for R - Server Edition\", \"versions\": [{\"status\": \"affected\", \"version\": \"1\", \"versionType\": \"Patch\", \"lessThanOrEqual\": \"17.6\"}, {\"status\": \"affected\", \"version\": \"1.18.0\", \"versionType\": \"Patch\"}, {\"status\": \"affected\", \"version\": \"1.19.0\", \"versionType\": \"Patch\"}, {\"status\": \"affected\", \"version\": \"1.20.0\", \"versionType\": \"Patch\"}, {\"status\": \"affected\", \"version\": \"1.21.0\", \"versionType\": \"Patch\"}, {\"status\": \"affected\", \"version\": \"1.21.1\", \"versionType\": \"Patch\"}], \"defaultStatus\": \"unknown\"}], \"datePublic\": \"2025-04-08T16:30:00.000Z\", \"references\": [{\"url\": \"https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-april-08-2025-spotfire-cve-2025-3114-r3484/\"}], \"x_generator\": {\"engine\": \"Vulnogram 0.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Code Execution via Malicious Files:\\u00a0Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise.\\n\\nSandbox Bypass Vulnerability:\\u00a0A flaw in the TERR security mechanism allows attackers to bypass sandbox restrictions, enabling the execution of untrusted code without appropriate controls.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003e\u003cstrong\u003eCode Execution via Malicious Files:\u003c/strong\u003e\u0026nbsp;Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise.\u003c/p\u003e\u003cp\u003e\u003cstrong\u003eSandbox Bypass Vulnerability:\u003c/strong\u003e\u0026nbsp;A flaw in the TERR security mechanism allows attackers to bypass sandbox restrictions, enabling the execution of untrusted code without appropriate controls.\u003c/p\u003e\", \"base64\": false}]}], \"providerMetadata\": {\"orgId\": \"4f830c72-39e4-45f6-a99f-78cc01ae04db\", \"shortName\": \"tibco\", \"dateUpdated\": \"2025-04-09T17:29:48.612Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-3114\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-04-15T20:29:11.223Z\", \"dateReserved\": \"2025-04-02T10:55:41.023Z\", \"assignerOrgId\": \"4f830c72-39e4-45f6-a99f-78cc01ae04db\", \"datePublished\": \"2025-04-09T17:29:48.612Z\", \"assignerShortName\": \"tibco\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

FKIE_CVE-2025-3114

Vulnerability from fkie_nvd - Published: 2025-04-09 18:15 - Updated: 2025-04-15 21:16

Severity ?

9.4 (Critical) - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Summary

References

	URL	Tags
	security@tibco.com	https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-april-08-2025-spotfire-cve-2025-3114-r3484/

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Code Execution via Malicious Files:\u00a0Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise.\n\nSandbox Bypass Vulnerability:\u00a0A flaw in the TERR security mechanism allows attackers to bypass sandbox restrictions, enabling the execution of untrusted code without appropriate controls."
    },
    {
      "lang": "es",
      "value": "Ejecuci\u00f3n de c\u00f3digo mediante archivos maliciosos: Los atacantes pueden crear archivos especialmente manipulados con c\u00f3digo incrustado que puede ejecutarse sin la validaci\u00f3n de seguridad adecuada, lo que podr\u00eda comprometer el sistema. Vulnerabilidad de elusi\u00f3n de la zona de pruebas: Una falla en el mecanismo de seguridad TERR permite a los atacantes eludir las restricciones de la zona de pruebas, lo que permite la ejecuci\u00f3n de c\u00f3digo no confiable sin los controles adecuados."
    }
  ],
  "id": "CVE-2025-3114",
  "lastModified": "2025-04-15T21:16:04.847",
  "metrics": {
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "NETWORK",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 9.4,
          "baseSeverity": "CRITICAL",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "LOW",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "HIGH",
          "subConfidentialityImpact": "HIGH",
          "subIntegrityImpact": "HIGH",
          "userInteraction": "NONE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "HIGH",
          "vulnConfidentialityImpact": "HIGH",
          "vulnIntegrityImpact": "HIGH",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "security@tibco.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2025-04-09T18:15:50.643",
  "references": [
    {
      "source": "security@tibco.com",
      "url": "https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-april-08-2025-spotfire-cve-2025-3114-r3484/"
    }
  ],
  "sourceIdentifier": "security@tibco.com",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        },
        {
          "lang": "en",
          "value": "CWE-693"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}

GHSA-V6V7-M3W9-36G8

Vulnerability from github – Published: 2025-04-09 18:30 – Updated: 2025-04-15 21:31

Details

Code Execution via Malicious Files: Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise.

Sandbox Bypass Vulnerability: A flaw in the TERR security mechanism allows attackers to bypass sandbox restrictions, enabling the execution of untrusted code without appropriate controls.

Severity ?

9.4 (Critical)


                  
                    CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-3114"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-94"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-04-09T18:15:50Z",
    "severity": "CRITICAL"
  },
  "details": "Code Execution via Malicious Files:\u00a0Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise.\n\nSandbox Bypass Vulnerability:\u00a0A flaw in the TERR security mechanism allows attackers to bypass sandbox restrictions, enabling the execution of untrusted code without appropriate controls.",
  "id": "GHSA-v6v7-m3w9-36g8",
  "modified": "2025-04-15T21:31:31Z",
  "published": "2025-04-09T18:30:56Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3114"
    },
    {
      "type": "WEB",
      "url": "https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-april-08-2025-spotfire-cve-2025-3114-r3484"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

WID-SEC-W-2025-0764

Vulnerability from csaf_certbund - Published: 2025-04-08 22:00 - Updated: 2025-04-08 22:00

Summary

Spotfire Statistics Services: Mehrere Schwachstellen

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung

Spotfire Statistics Services ist ein "light-weight" Server, der eine Kommunikationsschicht und eine Serviceschicht, sowie einen S-PLUS oder R "engine pool" und andere Features bietet.

Angriff

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Spotfire Statistics Services ausnutzen, um beliebigen Programmcode auszuführen und Sicherheitsmaßnahmen zu umgehen.

Betroffene Betriebssysteme

- Linux - UNIX - Windows

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Spotfire Statistics Services ist ein \"light-weight\" Server, der eine Kommunikationsschicht und eine Serviceschicht, sowie einen S-PLUS oder R \"engine pool\" und andere Features bietet.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Spotfire Statistics Services ausnutzen, um beliebigen Programmcode auszuf\u00fchren und Sicherheitsma\u00dfnahmen zu umgehen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-0764 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0764.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-0764 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0764"
      },
      {
        "category": "external",
        "summary": "Spotfire Security Advisory CVE-2025-3114 vom 2025-04-08",
        "url": "https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-april-08-2025-spotfire-cve-2025-3114-r3484/"
      },
      {
        "category": "external",
        "summary": "Spotfire Security Advisory Spotfire - CVE-2025-3115 vom 2025-04-08",
        "url": "https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-april-08-2025-spotfire-cve-2025-3115-r3485/"
      }
    ],
    "source_lang": "en-US",
    "title": "Spotfire Statistics Services: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2025-04-08T22:00:00.000+00:00",
      "generator": {
        "date": "2025-04-09T08:45:12.989+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.12"
        }
      },
      "id": "WID-SEC-W-2025-0764",
      "initial_release_date": "2025-04-08T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-04-08T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c14.0.7",
                "product": {
                  "name": "Spotfire Statistics Services \u003c14.0.7",
                  "product_id": "T042567"
                }
              },
              {
                "category": "product_version",
                "name": "14.0.7",
                "product": {
                  "name": "Spotfire Statistics Services 14.0.7",
                  "product_id": "T042567-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:spotfire:statistics_services:14.0.7"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c14.4.2",
                "product": {
                  "name": "Spotfire Statistics Services \u003c14.4.2",
                  "product_id": "T042568"
                }
              },
              {
                "category": "product_version",
                "name": "14.4.2",
                "product": {
                  "name": "Spotfire Statistics Services 14.4.2",
                  "product_id": "T042568-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:spotfire:statistics_services:14.4.2"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Statistics Services"
          }
        ],
        "category": "vendor",
        "name": "Spotfire"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-3114",
      "product_status": {
        "known_affected": [
          "T042567",
          "T042568"
        ]
      },
      "release_date": "2025-04-08T22:00:00.000+00:00",
      "title": "CVE-2025-3114"
    },
    {
      "cve": "CVE-2025-3115",
      "product_status": {
        "known_affected": [
          "T042567",
          "T042568"
        ]
      },
      "release_date": "2025-04-08T22:00:00.000+00:00",
      "title": "CVE-2025-3115"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2025-3114 (GCVE-0-2025-3114)

FKIE_CVE-2025-3114

GHSA-V6V7-M3W9-36G8

WID-SEC-W-2025-0764

Tags

Sightings

Nomenclature