Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2623▼ 224 respecto a la semana anterior

Críticas / altas1384▲ 157 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-3115	Modificada	Crítica (9.4)	0.67%	—	Tibco Spotfire Enterprise Runtime FOR R Tibco Spotfire Statistics Services Tibco Spotfire Analyst Tibco Spotfire Deployment KIT+2	9/4/2025	17/6/2026	Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions. Additionally, insufficient validation of filenames during file uploads can enable attackers to upload and execute malicious files, leading to arbitrary code execution
CVE-2024-3331	Aplazada	Media (6.8)	0.38%	—	Spotfire Enterprise Runtime FOR R - Server Edition^AI Spotfire Statistics Services^AI Spotfire Desktop^AI Spotfire^AI+1	27/6/2024	17/6/2026	Vulnerability in Spotfire Spotfire Enterprise Runtime for R - Server Edition, Spotfire Spotfire Statistics Services, Spotfire Spotfire Analyst, Spotfire Spotfire Desktop, Spotfire Spotfire Server allows The impact of this vulnerability depends on the privileges of the user running the affected software..This issue…
CVE-2023-29268	Modificada	Crítica (9.8)	1.0%	—	Tibco Spotfire Statistics Services	26/4/2023	17/6/2026	The Splus Server component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that allows an unauthenticated remote attacker to upload or modify arbitrary files within the web server directory on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire…
CVE-2021-28830	Modificada	Alta (7.8)	0.25%	—	Tibco Enterprise Runtime FOR R Tibco Spotfire Analytics Platform Tibco Spotfire Server Tibco Spotfire Statistics Services	29/6/2021	17/6/2026	The TIBCO Spotfire Server and TIBCO Enterprise Runtime for R components of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire…
CVE-2021-23275	Modificada	Alta (7.8)	0.22%	—	Tibco Enterprise Runtime FOR R Tibco Spotfire Analytics Platform Tibco Spotfire Server Tibco Spotfire Statistics Services	29/6/2021	17/6/2026	The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Server, TIBCO Spotfire Server, TIBCO…
CVE-2019-11204	Modificada	Alta (8.8)	1.5%	—	Tibco Spotfire Statistics Services	14/5/2019	17/6/2026	The web interface component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that might theoretically allow an authenticated user to access sensitive information needed by the Spotfire Statistics Services server. The sensitive information that might be affected includes database,…
CVE-2018-12410	Modificada	Crítica (9.8)	4.0%	—	Tibco Spotfire Statistics Services	10/10/2018	17/6/2026	The web server component of TIBCO Software Inc's Spotfire Statistics Services contains multiple vulnerabilities that may allow the remote execution of code. Without needing to authenticate, an attacker may be able to remotely execute code with the permissions of the system account used to run the web server component.…
CVE-2013-2371	Modificada	Media (5)	2.0%	—	Tibco Spotfire Statistics Services	15/3/2013	16/6/2026	The Web API in the Statistics Server in TIBCO Spotfire Statistics Services 3.3.x before 3.3.1, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 allows remote attackers to obtain sensitive information via an unspecified HTTP request.