RCE in Spotfire Deployment Kit Used In Server

CVE-2025-3114

Code Execution via Malicious Files: Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise. Sandbox Bypass Vulnerability: A flaw in the TERR security mechanism allows attackers to bypass sandbox restrictions, enabling the execution of untrusted code without appropriate controls.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.006 (43.5th percentile) — read the EPSS interpretation.