Xxe

2013-12-2114:22:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.1%

JSON

The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

CPENameOperatorVersion
spss_collaboration_and_deployment_serviceseq5.0.0
spss_collaboration_and_deployment_serviceseq5.0.0.1
spss_collaboration_and_deployment_serviceseq5.0.0.2
spss_collaboration_and_deployment_serviceseq4.2.1.3
spss_collaboration_and_deployment_serviceseq4.2.1
spss_collaboration_and_deployment_serviceseq4.2.1.1
spss_collaboration_and_deployment_serviceseq4.2.1.2

Name	Operator	Version
spss_collaboration_and_deployment_services	eq	5.0.0
spss_collaboration_and_deployment_services	eq	5.0.0.1
spss_collaboration_and_deployment_services	eq	5.0.0.2
spss_collaboration_and_deployment_services	eq	4.2.1.3
spss_collaboration_and_deployment_services	eq	4.2.1
spss_collaboration_and_deployment_services	eq	4.2.1.1
spss_collaboration_and_deployment_services	eq	4.2.1.2