CVE-2013-5369

2013-09-1618:24:48

CWE-94

[email protected]

web.nvd.nist.gov

ibm

spss

analytical

decision management

remote code execution

cve-2013-5369

nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.2%

JSON

IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 might allow remote attackers to execute arbitrary code by deploying and accessing a service.

Affected configurations

NVD

Node

ibmspss_analytical_decision_managementMatch6.1.0.0

ibmspss_analytical_decision_managementMatch6.2.0.0

ibmspss_analytical_decision_managementMatch7.0.0.0

CPENameOperatorVersion
ibm:spss_analytical_decision_managementibm spss analytical decision managementeq6.1.0.0
ibm:spss_analytical_decision_managementibm spss analytical decision managementeq6.2.0.0
ibm:spss_analytical_decision_managementibm spss analytical decision managementeq7.0.0.0

CPE	Name	Operator	Version
ibm:spss_analytical_decision_management	ibm spss analytical decision management	eq	6.1.0.0
ibm:spss_analytical_decision_management	ibm spss analytical decision management	eq	6.2.0.0
ibm:spss_analytical_decision_management	ibm spss analytical decision management	eq	7.0.0.0