Description
Code Execution via Malicious Files: Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise.
Sandbox Bypass Vulnerability: A flaw in the TERR security mechanism allows attackers to bypass sandbox restrictions, enabling the execution of untrusted code without appropriate controls.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Spotfire | Spotfire Enterprise Runtime for R | 6 – ≤ 1.4 | — |
| Spotfire | Spotfire Statistics Services | 14 – ≤ 0.6, 14.1.0, 14.2.0, 14.3.0, 14.4.0, 14.4.1 | — |
| Spotfire | Spotfire Analyst | 14 – ≤ 0.5, 14.1.0, 14.2.0, 14.3.0, 14.4.0, 14.4.1 | — |
| Spotfire | Deployment Kit used in Spotfire Server | 14 – ≤ 0.6, 14.1.0, 14.2.0, 14.3.0, 14.4.0, 14.4.1 | — |
| Spotfire | Spotfire Desktop | 14 – ≤ 4.1 | — |
| Spotfire | Spotfire for AWS Marketplace | — | — |
| Spotfire | Spotfire Enterprise Runtime for R - Server Edition | 1 – ≤ 17.6, 1.18.0, 1.19.0, 1.20.0, 1.21.0, 1.21.1 | — |
Advisories 1
- WID-SEC-2025-0764 Spotfire Statistics Services: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 8, 2025