CVE-2025-3114: Spotfire Code Execution Vulnerability
Code Execution via Malicious Files: Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise.
Sandbox Bypass Vulnerability: A flaw in the TERR security mechanism allows attackers to bypass sandbox restrictions, enabling the execution of untrusted code without appropriate controls.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3114?
CVE-2025-3114 has a high severity rating due to its potential to allow code execution through malicious files.
How do I fix CVE-2025-3114?
To fix CVE-2025-3114, ensure that you update to the latest version of TIBCO Spotfire, which includes security patches.
What types of attacks are possible with CVE-2025-3114?
CVE-2025-3114 can be exploited by attackers to execute arbitrary code through specially crafted files.
Which software is affected by CVE-2025-3114?
CVE-2025-3114 affects TIBCO Spotfire Analytics Platform, exposing it to potential security risks.
Is there a workaround for CVE-2025-3114 before applying a fix?
As a temporary workaround for CVE-2025-3114, avoid opening untrusted or unknown files in TIBCO Spotfire.