CVE-2024-3331

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2024-3331", "assignerOrgId": "4f830c72-39e4-45f6-a99f-78cc01ae04db", "state": "PUBLISHED", "assignerShortName": "tibco", "dateReserved": "2024-04-04T17:01:59.760Z", "datePublished": "2024-06-27T18:50:13.758Z", "dateUpdated": "2026-03-02T18:28:16.374Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Spotfire Enterprise Runtime for R - Server Edition", "vendor": "Spotfire", "versions": [{"lessThanOrEqual": "1.20.0", "status": "affected", "version": "1.12.7", "versionType": "patch"}]}, {"defaultStatus": "unaffected", "product": "Spotfire Statistics Services", "vendor": "Spotfire", "versions": [{"lessThanOrEqual": "12.3.1", "status": "affected", "version": "12.0.7", "versionType": "patch"}, {"lessThanOrEqual": "14.3.0", "status": "affected", "version": "14.0.0", "versionType": "patch"}]}, {"defaultStatus": "unaffected", "product": "Spotfire Analyst", "vendor": "Spotfire", "versions": [{"lessThanOrEqual": "12.5.0", "status": "affected", "version": "12.0.9", "versionType": "patch"}, {"lessThanOrEqual": "14.3.0", "status": "affected", "version": "14.0.0", "versionType": "Patch"}]}, {"defaultStatus": "unaffected", "product": "Spotfire Desktop", "vendor": "Spotfire", "versions": [{"lessThanOrEqual": "14.3.0", "status": "affected", "version": "14.0", "versionType": "patch"}]}, {"defaultStatus": "unaffected", "product": "Spotfire Server", "vendor": "Spotfire", "versions": [{"lessThanOrEqual": "12.5.0", "status": "affected", "version": "12.0.10", "versionType": "patch"}, {"lessThanOrEqual": "14.3.0", "status": "affected", "version": "14.0.0", "versionType": "patch"}]}], "datePublic": "2024-06-26T06:30:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Vulnerability in Spotfire Spotfire Enterprise Runtime for R - Server Edition, Spotfire Spotfire Statistics Services, Spotfire Spotfire Analyst, Spotfire Spotfire Desktop, Spotfire Spotfire Server allows The impact of this vulnerability depends on the privileges of the user running the affected software..<p>This issue affects Spotfire Enterprise Runtime for R - Server Edition: from 1.12.7 through 1.20.0; Spotfire Statistics Services: from 12.0.7 through 12.3.1, from 14.0.0 through 14.3.0; Spotfire Analyst: from 12.0.9 through 12.5.0, from 14.0.0 through 14.3.0; Spotfire Desktop: from 14.0 through 14.3.0; Spotfire Server: from 12.0.10 through 12.5.0, from 14.0.0 through 14.3.0.</p>"}], "value": "Vulnerability in Spotfire Spotfire Enterprise Runtime for R - Server Edition, Spotfire Spotfire Statistics Services, Spotfire Spotfire Analyst, Spotfire Spotfire Desktop, Spotfire Spotfire Server allows The impact of this vulnerability depends on the privileges of the user running the affected software..This issue affects Spotfire Enterprise Runtime for R - Server Edition: from 1.12.7 through 1.20.0; Spotfire Statistics Services: from 12.0.7 through 12.3.1, from 14.0.0 through 14.3.0; Spotfire Analyst: from 12.0.9 through 12.5.0, from 14.0.0 through 14.3.0; Spotfire Desktop: from 14.0 through 14.3.0; Spotfire Server: from 12.0.10 through 12.5.0, from 14.0.0 through 14.3.0."}], "impacts": [{"descriptions": [{"lang": "en", "value": "The impact of this vulnerability depends on the privileges of the user running the affected software."}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "providerMetadata": {"orgId": "4f830c72-39e4-45f6-a99f-78cc01ae04db", "shortName": "tibco", "dateUpdated": "2024-06-27T18:50:13.758Z"}, "references": [{"url": "https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-june-262024-spotfire-cve-2024-3331-r3436/"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<b><div><b><ul><li><p><span style=\"background-color: transparent;\">Spotfire Enterprise Runtime for R (aka TERR) 4.5.0, 5.0.0, 5.1.0, 6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.1.0, 6.1.1, 6.1.2: upgrade to version 6.1.3 or higher</span></p></li></ul><br><ul><li><p><span style=\"background-color: transparent;\">Spotfire Enterprise Runtime for R - Server Edition 1.12.7 and earlier: upgrade to version 1.12.8 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Enterprise Runtime for R - Server Edition 1.13.0, 1.14.0, 1.15.0, 1.16.0, 1.17.0, 1.17.1, 1.17.2, 1.17.3: upgrade to version 1.17.4 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Enterprise Runtime for R - Server Edition 1.18.0, 1.19.0, 1.20.0: upgrade to version 1.21.0 or higher</span><span style=\"background-color: transparent;\"><br><br></span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Statistics Services 12.0.7 and earlier: upgrade to version 12.0.8 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Statistics Services 12.1.0, 12.2.0, 12.3.0, 12.3.1, 14.0.0, 14.0.1, 14.0.2, 14.0.3: upgrade to version 14.0.4 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Statistics Services 14.1.0, 14.2.0, 14.3.0: upgrade to version 14.4.0 or higher</span><span style=\"background-color: transparent;\"><br><br></span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Analyst 12.0.9 and earlier: upgrade to version 12.0.10 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Analyst 12.1.0, 12.1.1, 12.2.0, 12.3.0, 12.4.0, 12.5.0, 14.0.0, 14.0.1, 14.0.2: upgrade to version 14.0.3 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Analyst 14.1.0, 14.2.0, 14.3.0: upgrade to version 14.4.0 or higher</span><span style=\"background-color: transparent;\"><br><br></span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Desktop 14.3.0 and earlier: upgrade to version 14.4.0 or higher</span><span style=\"background-color: transparent;\"><br><br></span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Server 12.0.10 and earlier: upgrade to version 12.0.11 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Server 12.1.0, 12.1.1, 12.2.0, 12.3.0, 12.4.0, 12.5.0, 14.0.0, 14.0.1, 14.0.2, 14.0.3: upgrade to version 14.0.4 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Server 14.1.0, 14.2.0, 14.3.0: upgrade to version 14.4.0 or higher</span><span style=\"background-color: transparent;\"><br><br></span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire for AWS Marketplace 14.3.0 and earlier: upgrade to version 14.4.0 or higher</span></p></li></ul></b></div></b>"}], "value": "* Spotfire Enterprise Runtime for R (aka TERR) 4.5.0, 5.0.0, 5.1.0, 6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.1.0, 6.1.1, 6.1.2: upgrade to version 6.1.3 or higher\n\n\n\n\n\n * Spotfire Enterprise Runtime for R - Server Edition 1.12.7 and earlier: upgrade to version 1.12.8 or higher\n\n\n * Spotfire Enterprise Runtime for R - Server Edition 1.13.0, 1.14.0, 1.15.0, 1.16.0, 1.17.0, 1.17.1, 1.17.2, 1.17.3: upgrade to version 1.17.4 or higher\n\n\n * Spotfire Enterprise Runtime for R - Server Edition 1.18.0, 1.19.0, 1.20.0: upgrade to version 1.21.0 or higher\n\n\n\n\n * Spotfire Statistics Services 12.0.7 and earlier: upgrade to version 12.0.8 or higher\n\n\n * Spotfire Statistics Services 12.1.0, 12.2.0, 12.3.0, 12.3.1, 14.0.0, 14.0.1, 14.0.2, 14.0.3: upgrade to version 14.0.4 or higher\n\n\n * Spotfire Statistics Services 14.1.0, 14.2.0, 14.3.0: upgrade to version 14.4.0 or higher\n\n\n\n\n * Spotfire Analyst 12.0.9 and earlier: upgrade to version 12.0.10 or higher\n\n\n * Spotfire Analyst 12.1.0, 12.1.1, 12.2.0, 12.3.0, 12.4.0, 12.5.0, 14.0.0, 14.0.1, 14.0.2: upgrade to version 14.0.3 or higher\n\n\n * Spotfire Analyst 14.1.0, 14.2.0, 14.3.0: upgrade to version 14.4.0 or higher\n\n\n\n\n * Spotfire Desktop 14.3.0 and earlier: upgrade to version 14.4.0 or higher\n\n\n\n\n * Spotfire Server 12.0.10 and earlier: upgrade to version 12.0.11 or higher\n\n\n * Spotfire Server 12.1.0, 12.1.1, 12.2.0, 12.3.0, 12.4.0, 12.5.0, 14.0.0, 14.0.1, 14.0.2, 14.0.3: upgrade to version 14.0.4 or higher\n\n\n * Spotfire Server 14.1.0, 14.2.0, 14.3.0: upgrade to version 14.4.0 or higher\n\n\n\n\n * Spotfire for AWS Marketplace 14.3.0 and earlier: upgrade to version 14.4.0 or higher"}], "source": {"discovery": "UNKNOWN"}, "title": "Spotfire: NTLM token leakage", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-863", "lang": "en", "description": "CWE-863 Incorrect Authorization"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-07-01T19:50:43.928829Z", "id": "CVE-2024-3331", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-02T18:28:16.374Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T20:05:08.452Z"}, "title": "CVE Program Container", "references": [{"url": "https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-june-262024-spotfire-cve-2024-3331-r3436/", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-june-262024-spotfire-cve-2024-3331-r3436/", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T20:05:08.452Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-3331", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-07-01T19:50:43.928829Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-863", "description": "CWE-863 Incorrect Authorization"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-05T15:20:44.587Z"}}], "cna": {"title": "Spotfire: NTLM token leakage", "source": {"discovery": "UNKNOWN"}, "impacts": [{"descriptions": [{"lang": "en", "value": "The impact of this vulnerability depends on the privileges of the user running the affected software."}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Spotfire", "product": "Spotfire Enterprise Runtime for R - Server Edition", "versions": [{"status": "affected", "version": "1.12.7", "versionType": "patch", "lessThanOrEqual": "1.20.0"}], "defaultStatus": "unaffected"}, {"vendor": "Spotfire", "product": "Spotfire Statistics Services", "versions": [{"status": "affected", "version": "12.0.7", "versionType": "patch", "lessThanOrEqual": "12.3.1"}, {"status": "affected", "version": "14.0.0", "versionType": "patch", "lessThanOrEqual": "14.3.0"}], "defaultStatus": "unaffected"}, {"vendor": "Spotfire", "product": "Spotfire Analyst", "versions": [{"status": "affected", "version": "12.0.9", "versionType": "patch", "lessThanOrEqual": "12.5.0"}, {"status": "affected", "version": "14.0.0", "versionType": "Patch", "lessThanOrEqual": "14.3.0"}], "defaultStatus": "unaffected"}, {"vendor": "Spotfire", "product": "Spotfire Desktop", "versions": [{"status": "affected", "version": "14.0", "versionType": "patch", "lessThanOrEqual": "14.3.0"}], "defaultStatus": "unaffected"}, {"vendor": "Spotfire", "product": "Spotfire Server", "versions": [{"status": "affected", "version": "12.0.10", "versionType": "patch", "lessThanOrEqual": "12.5.0"}, {"status": "affected", "version": "14.0.0", "versionType": "patch", "lessThanOrEqual": "14.3.0"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "* Spotfire Enterprise Runtime for R (aka TERR) 4.5.0, 5.0.0, 5.1.0, 6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.1.0, 6.1.1, 6.1.2: upgrade to version 6.1.3 or higher\n\n\n\n\n\n * Spotfire Enterprise Runtime for R - Server Edition 1.12.7 and earlier: upgrade to version 1.12.8 or higher\n\n\n * Spotfire Enterprise Runtime for R - Server Edition 1.13.0, 1.14.0, 1.15.0, 1.16.0, 1.17.0, 1.17.1, 1.17.2, 1.17.3: upgrade to version 1.17.4 or higher\n\n\n * Spotfire Enterprise Runtime for R - Server Edition 1.18.0, 1.19.0, 1.20.0: upgrade to version 1.21.0 or higher\n\n\n\n\n * Spotfire Statistics Services 12.0.7 and earlier: upgrade to version 12.0.8 or higher\n\n\n * Spotfire Statistics Services 12.1.0, 12.2.0, 12.3.0, 12.3.1, 14.0.0, 14.0.1, 14.0.2, 14.0.3: upgrade to version 14.0.4 or higher\n\n\n * Spotfire Statistics Services 14.1.0, 14.2.0, 14.3.0: upgrade to version 14.4.0 or higher\n\n\n\n\n * Spotfire Analyst 12.0.9 and earlier: upgrade to version 12.0.10 or higher\n\n\n * Spotfire Analyst 12.1.0, 12.1.1, 12.2.0, 12.3.0, 12.4.0, 12.5.0, 14.0.0, 14.0.1, 14.0.2: upgrade to version 14.0.3 or higher\n\n\n * Spotfire Analyst 14.1.0, 14.2.0, 14.3.0: upgrade to version 14.4.0 or higher\n\n\n\n\n * Spotfire Desktop 14.3.0 and earlier: upgrade to version 14.4.0 or higher\n\n\n\n\n * Spotfire Server 12.0.10 and earlier: upgrade to version 12.0.11 or higher\n\n\n * Spotfire Server 12.1.0, 12.1.1, 12.2.0, 12.3.0, 12.4.0, 12.5.0, 14.0.0, 14.0.1, 14.0.2, 14.0.3: upgrade to version 14.0.4 or higher\n\n\n * Spotfire Server 14.1.0, 14.2.0, 14.3.0: upgrade to version 14.4.0 or higher\n\n\n\n\n * Spotfire for AWS Marketplace 14.3.0 and earlier: upgrade to version 14.4.0 or higher", "supportingMedia": [{"type": "text/html", "value": "<b><div><b><ul><li><p><span style=\"background-color: transparent;\">Spotfire Enterprise Runtime for R (aka TERR) 4.5.0, 5.0.0, 5.1.0, 6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.1.0, 6.1.1, 6.1.2: upgrade to version 6.1.3 or higher</span></p></li></ul><br><ul><li><p><span style=\"background-color: transparent;\">Spotfire Enterprise Runtime for R - Server Edition 1.12.7 and earlier: upgrade to version 1.12.8 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Enterprise Runtime for R - Server Edition 1.13.0, 1.14.0, 1.15.0, 1.16.0, 1.17.0, 1.17.1, 1.17.2, 1.17.3: upgrade to version 1.17.4 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Enterprise Runtime for R - Server Edition 1.18.0, 1.19.0, 1.20.0: upgrade to version 1.21.0 or higher</span><span style=\"background-color: transparent;\"><br><br></span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Statistics Services 12.0.7 and earlier: upgrade to version 12.0.8 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Statistics Services 12.1.0, 12.2.0, 12.3.0, 12.3.1, 14.0.0, 14.0.1, 14.0.2, 14.0.3: upgrade to version 14.0.4 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Statistics Services 14.1.0, 14.2.0, 14.3.0: upgrade to version 14.4.0 or higher</span><span style=\"background-color: transparent;\"><br><br></span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Analyst 12.0.9 and earlier: upgrade to version 12.0.10 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Analyst 12.1.0, 12.1.1, 12.2.0, 12.3.0, 12.4.0, 12.5.0, 14.0.0, 14.0.1, 14.0.2: upgrade to version 14.0.3 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Analyst 14.1.0, 14.2.0, 14.3.0: upgrade to version 14.4.0 or higher</span><span style=\"background-color: transparent;\"><br><br></span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Desktop 14.3.0 and earlier: upgrade to version 14.4.0 or higher</span><span style=\"background-color: transparent;\"><br><br></span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Server 12.0.10 and earlier: upgrade to version 12.0.11 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Server 12.1.0, 12.1.1, 12.2.0, 12.3.0, 12.4.0, 12.5.0, 14.0.0, 14.0.1, 14.0.2, 14.0.3: upgrade to version 14.0.4 or higher</span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire Server 14.1.0, 14.2.0, 14.3.0: upgrade to version 14.4.0 or higher</span><span style=\"background-color: transparent;\"><br><br></span></p></li><li><p><span style=\"background-color: transparent;\">Spotfire for AWS Marketplace 14.3.0 and earlier: upgrade to version 14.4.0 or higher</span></p></li></ul></b></div></b>", "base64": false}]}], "datePublic": "2024-06-26T06:30:00.000Z", "references": [{"url": "https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-june-262024-spotfire-cve-2024-3331-r3436/"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Vulnerability in Spotfire Spotfire Enterprise Runtime for R - Server Edition, Spotfire Spotfire Statistics Services, Spotfire Spotfire Analyst, Spotfire Spotfire Desktop, Spotfire Spotfire Server allows The impact of this vulnerability depends on the privileges of the user running the affected software..This issue affects Spotfire Enterprise Runtime for R - Server Edition: from 1.12.7 through 1.20.0; Spotfire Statistics Services: from 12.0.7 through 12.3.1, from 14.0.0 through 14.3.0; Spotfire Analyst: from 12.0.9 through 12.5.0, from 14.0.0 through 14.3.0; Spotfire Desktop: from 14.0 through 14.3.0; Spotfire Server: from 12.0.10 through 12.5.0, from 14.0.0 through 14.3.0.", "supportingMedia": [{"type": "text/html", "value": "Vulnerability in Spotfire Spotfire Enterprise Runtime for R - Server Edition, Spotfire Spotfire Statistics Services, Spotfire Spotfire Analyst, Spotfire Spotfire Desktop, Spotfire Spotfire Server allows The impact of this vulnerability depends on the privileges of the user running the affected software..<p>This issue affects Spotfire Enterprise Runtime for R - Server Edition: from 1.12.7 through 1.20.0; Spotfire Statistics Services: from 12.0.7 through 12.3.1, from 14.0.0 through 14.3.0; Spotfire Analyst: from 12.0.9 through 12.5.0, from 14.0.0 through 14.3.0; Spotfire Desktop: from 14.0 through 14.3.0; Spotfire Server: from 12.0.10 through 12.5.0, from 14.0.0 through 14.3.0.</p>", "base64": false}]}], "providerMetadata": {"orgId": "4f830c72-39e4-45f6-a99f-78cc01ae04db", "shortName": "tibco", "dateUpdated": "2024-06-27T18:50:13.758Z"}}}, "cveMetadata": {"cveId": "CVE-2024-3331", "state": "PUBLISHED", "dateUpdated": "2026-03-02T18:28:16.374Z", "dateReserved": "2024-04-04T17:01:59.760Z", "assignerOrgId": "4f830c72-39e4-45f6-a99f-78cc01ae04db", "datePublished": "2024-06-27T18:50:13.758Z", "assignerShortName": "tibco"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Spotfire Enterprise Runtime for R - Server Edition", "vendor": "Spotfire", "versions": [{"lessThanOrEqual": "1.20.0", "status": "affected", "version": "1.12.7", "versionType": "patch"}]}, {"defaultStatus": "unaffected", "product": "Spotfire Statistics Services", "vendor": "Spotfire", "versions": [{"lessThanOrEqual": "12.3.1", "status": "affected", "version": "12.0.7", "versionType": "patch"}, {"lessThanOrEqual": "14.3.0", "status": "affected", "version": "14.0.0", "versionType": "patch"}]}, {"defaultStatus": "unaffected", "product": "Spotfire Analyst", "vendor": "Spotfire", "versions": [{"lessThanOrEqual": "12.5.0", "status": "affected", "version": "12.0.9", "versionType": "patch"}, {"lessThanOrEqual": "14.3.0", "status": "affected", "version": "14.0.0", "versionType": "Patch"}]}, {"defaultStatus": "unaffected", "product": "Spotfire Desktop", "vendor": "Spotfire", "versions": [{"lessThanOrEqual": "14.3.0", "status": "affected", "version": "14.0", "versionType": "patch"}]}, {"defaultStatus": "unaffected", "product": "Spotfire Server", "vendor": "Spotfire", "versions": [{"lessThanOrEqual": "12.5.0", "status": "affected", "version": "12.0.10", "versionType": "patch"}, {"lessThanOrEqual": "14.3.0", "status": "affected", "version": "14.0.0", "versionType": "patch"}]}], "source": "security@tibco.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Vulnerability in Spotfire Spotfire Enterprise Runtime for R - Server Edition, Spotfire Spotfire Statistics Services, Spotfire Spotfire Analyst, Spotfire Spotfire Desktop, Spotfire Spotfire Server allows The impact of this vulnerability depends on the privileges of the user running the affected software..This issue affects Spotfire Enterprise Runtime for R - Server Edition: from 1.12.7 through 1.20.0; Spotfire Statistics Services: from 12.0.7 through 12.3.1, from 14.0.0 through 14.3.0; Spotfire Analyst: from 12.0.9 through 12.5.0, from 14.0.0 through 14.3.0; Spotfire Desktop: from 14.0 through 14.3.0; Spotfire Server: from 12.0.10 through 12.5.0, from 14.0.0 through 14.3.0."}, {"lang": "es", "value": "Vulnerabilidad en Spotfire Spotfire Enterprise Runtime para R - Server Edition, Spotfire Spotfire Statistics Services, Spotfire Spotfire Analyst, Spotfire Spotfire Desktop, Spotfire Spotfire Server permite El impacto de esta vulnerabilidad depende de los privilegios del usuario que ejecuta el software afectado. Este problema afecta Spotfire Enterprise Runtime para R - Server Edition: desde 1.12.7 hasta 1.20.0; Servicios de estad\u00edsticas de Spotfire: de 12.0.7 a 12.3.1, de 14.0.0 a 14.3.0; Spotfire Analyst: del 12.0.9 al 12.5.0, del 14.0.0 al 14.3.0; Spotfire Desktop: de 14.0 a 14.3.0; Servidor Spotfire: desde 12.0.10 hasta 12.5.0, desde 14.0.0 hasta 14.3.0."}], "id": "CVE-2024-3331", "lastModified": "2026-06-17T07:43:47.553", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 4.0, "source": "security@tibco.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-3331", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-07-01T19:50:43.928829Z", "version": "2.0.3"}}]}, "published": "2024-06-27T19:15:15.153", "references": [{"source": "security@tibco.com", "url": "https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-june-262024-spotfire-cve-2024-3331-r3436/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://community.spotfire.com/articles/spotfire/spotfire-security-advisory-june-262024-spotfire-cve-2024-3331-r3436/"}], "sourceIdentifier": "security@tibco.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-863"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{}