CVE-2013-4069

🗓️ 21 Dec 2013 14:56:22Reported by ibmType

The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue

Reporter	Title	Published	Views	Family All 4
NVD	CVE-2013-4069	21 Dec 201314:22	–	nvd
Cvelist	CVE-2013-4069	21 Dec 201311:00	–	cvelist
Prion	Xxe	21 Dec 201314:22	–	prion
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM SPSS Collaboration and Deployment Services	16 Jun 201813:14	–	ibm

Nvd

Node

ibm spss_collaboration_and_deployment_servicesMatch4.2.1

ibm spss_collaboration_and_deployment_servicesMatch4.2.1.1

ibm spss_collaboration_and_deployment_servicesMatch4.2.1.2

ibm spss_collaboration_and_deployment_servicesMatch4.2.1.3

ibm spss_collaboration_and_deployment_servicesMatch5.0.0

ibm spss_collaboration_and_deployment_servicesMatch5.0.0.1

ibm spss_collaboration_and_deployment_servicesMatch5.0.0.2

Source	Link
www-01	www.www-01.ibm.com/support/docview.wss
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/86621
www-01	www.www-01.ibm.com/support/docview.wss

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Dec 2013 14:22Current

6.7Medium risk

Vulners AI Score6.7

CVSS25

EPSS0.00289

CWE-200