Description
The server component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, and TIBCO Spotfire Analytics Platform for AWS Marketplace contains a vulnerability that theoretically allows an unauthenticated user to bypass access controls and remotely execute code using the operating system account hosting the affected component. This issue affects: TIBCO Enterprise Runtime for R - Server Edition versions 1.2.0 and below, and TIBCO Spotfire Analytics Platform for AWS Marketplace versions 10.4.0 and 10.5.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TIBCO Software | TIBCO Enterprise Runtime for R - Server Edition | 1.2.0 and below | — |
| TIBCO Software | TIBCO Spotfire Analytics Platform for AWS Marketplace | 10.4.0, 10.5.0 | — |
Advisories 1
- WID-SEC-2025-2211 TIBCO Spotfire Analytics: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 6, 2025