CVE-2024-3331 - CVE House
Back to Database
Status published Medium CVE-2024-3331

Spotfire: NTLM token leakage

Vulnerability Description

Vulnerability in Spotfire Spotfire Enterprise Runtime for R - Server Edition, Spotfire Spotfire Statistics Services, Spotfire Spotfire Analyst, Spotfire Spotfire Desktop, Spotfire Spotfire Server allows The impact of this vulnerability depends on the privileges of the user running the affected software..This issue affects Spotfire Enterprise Runtime for R - Server Edition: from 1.12.7 through 1.20.0; Spotfire Statistics Services: from 12.0.7 through 12.3.1, from 14.0.0 through 14.3.0; Spotfire Analyst: from 12.0.9 through 12.5.0, from 14.0.0 through 14.3.0; Spotfire Desktop: from 14.0 through 14.3.0; Spotfire Server: from 12.0.10 through 12.5.0, from 14.0.0 through 14.3.0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-3331

Credits & Attribution

No credits recorded in the NVD database.

References

More from Spotfire

View All →
CVE-2025-3115
Spotfire Data Function Vulnerability
Critical 9.4
CVE-2025-3114
Spotfire Code Execution Vulnerability
Critical 9.4
CVE-2024-3330
Spotfire Remote Code Execution Vulnerability
Critical 9.9

Affected Vendor

Affected Software

Spotfire Enterprise Runtime for R - Server Edition, Spotfire Statistics Services, Spotfire Analyst, Spotfire Desktop, Spotfire Server
Vulnerable Versions:
1.12.7, 12.0.7, 14.0.0, 12.0.9, 14.0, 12.0.10

Timeline

Official Publish: June 27th, 2024
Last Modified: March 2nd, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.