- Description
- Code Execution via Malicious Files: Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise. Sandbox Bypass Vulnerability: A flaw in the TERR security mechanism allows attackers to bypass sandbox restrictions, enabling the execution of untrusted code without appropriate controls.
- Source
- security@tibco.com
- NVD status
- Awaiting Analysis
CVSS 4.0
- Type
- Secondary
- Base score
- 9.4
- Impact score
- -
- Exploitability score
- -
- Vector string
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Severity
- CRITICAL
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CWE-94
- Hype score
- Not currently trending
⚡️The vulnerability details are now available: https://t.co/Yzdm11XElK 🚨🚨TIBCO Spotfire Under Fire CVE-2025-3114: Spotfire Code Execution Vulnerability Attackers can craft files with embedded malicious code that Spotfire might run without proper checks. CVE-2025-3115: https:/
@zoomeye_team
12 Apr 2025
560 Impressions
2 Retweets
12 Likes
2 Bookmarks
0 Replies
0 Quotes
🚨 CVE-2025-3114 ⚠️🔴 CRITICAL (9.4) 🏢 Spotfire - Spotfire Enterprise Runtime for R 🏗️ 6 🔗 https://t.co/7boy9fMq8w #CyberCron #VulnAlert #InfoSec https://t.co/48pdiFlvXE
@cybercronai
11 Apr 2025
13 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Warning: #Spotfire fixed two critical vulnerabilities that could lead to arbitrary code execution. CVE-2025-3114 and CVE-2025-3115 both have a CVSS 4.0 score of 9.4! https://t.co/PNzDCqAxPy #Patch #Patch #Patch
@CCBalert
10 Apr 2025
35 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[CVE-2025-3114: CRITICAL] Beware of cyber threats! Attackers can exploit code execution via malicious files and bypass sandbox vulnerabilities, risking system compromise. Strengthen your cybersecurity defenses now.#cybersecurity,#vulnerability https://t.co/ponbrfjQKA https://t.co
@CveFindCom
9 Apr 2025
15 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes