Description (CNA)
Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions. Additionally, insufficient validation of filenames during file uploads can enable attackers to upload and execute malicious files, leading to arbitrary code execution
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Spotfire / Spotfire Statistics Services | affected 14 before 14.0.7; affected 14.1.0; affected 14.2.0; affected 14.3.0; affected 14.4.0; affected 14.4.1 |
| Spotfire / Spotfire Analyst | affected 14.0 before 14.0.6; affected 14.1.0; affected 14.2.0; affected 14.3.0; affected 14.4.0; affected 14.4.1 |
| Spotfire / Deployment Kit used in Spotfire Server | affected 14.0 before 14.0.7; affected 14.1.0; affected 14.2.0; affected 14.3.0; affected 14.4.0; affected 14.4.1 |
| Spotfire / Spotfire Desktop | affected 14.4 before 14.4.2 |
| Spotfire / Spotfire for AWS Marketplace | unknown 14.4 before 14.4.2 |
| Spotfire / Spotfire Enterprise Runtime for R - Server Edition | affected 1.17 before 1.17.7; affected 1.18.0; affected 1.19.0; affected 1.20.0; affected 1.21.0; affected 1.21.1 |
| Spotfire / Spotfire Service for Python | affected 1.17 before 1.17.7; affected 1.18.0 through 1.21.1 |
| Spotfire / Spotfire Service for R | affected 1.17 before 1.17.7; affected 1.18.0 through 1.21.1 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No references supplied.