Lucene search
HistoryDec 21, 2013 - 2:22 p.m.
CVE-2013-4069
ibm
spss
collaboration and deployment services
cve-2013-4069
security
vulnerability
xxe
xml
file reading
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.1%
The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Affected configurations
Node
ibmspss_collaboration_and_deployment_servicesMatch4.2.1
ORibmspss_collaboration_and_deployment_servicesMatch4.2.1.1
ORibmspss_collaboration_and_deployment_servicesMatch4.2.1.2
ORibmspss_collaboration_and_deployment_servicesMatch4.2.1.3
ORibmspss_collaboration_and_deployment_servicesMatch5.0.0
ORibmspss_collaboration_and_deployment_servicesMatch5.0.0.1
ORibmspss_collaboration_and_deployment_servicesMatch5.0.0.2
Related
nvd
nvd
CVE-2013-4069
2013-12-21 14:22:56
cvelist
cvelist
CVE-2013-4069
2013-12-21 11:00:00
prion
prion
Xxe
2013-12-21 14:22:00
ibm
ibm
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.1%
Related for CVE-2013-4069