Spotfire vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Spotfire products: 1 record(s), with severity, exploitation and fixes.

Spotfire Enterprise 1 Spotfire Enterprise with External Consumers 1 Spotfire on Kubernetes 1

Exploited only (KEV) →

CVE-2026-8590 High · 8.7 Jul 14, 2026

Spotfire OAuth2 PKCE Bypass for public clients

Vulnerability in Spotfire Spotfire Enterprise (Spotfire Server modules), Spotfire Spotfire Enterprise with External Consumers (Spotfire Server modules), Spotfire Spotfire on Kubernetes (Spotfire Server modules). This issue affects Spotfire Enterprise: through 14.0.12, through 14.4.2, through 14.5.0, through 14.6.1, through 14.6.2, through 14.7.0, through 14.8.0; Spotfire Enterprise with External Consumers: through 14.0.12, through 14.5.0, through 14.6.0, through 14.6.1, through 14.6.2, through 14.7.0, through 14.8.0; Spotfire on Kubernetes: through 4.2.0, 5.0.X, 6.0.X.