CVE-2013-5370

IBM SPSS Collaboration and Deployment Services is affected by CVE-2013-5370. The Security Bulletin notes remote code execution vulnerabilities for all users of C&DS, with affected versions 5.0 (up to FP2) and 4.2.1. The CVSS base score is 10 (vector AV:N/AC:L/Au:N/C:C/I:C/A:C). Remediation provid...

CVE-2013-4042

Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-5370...

CVE-2013-4042

IBM SPSS Collaboration and Deployment Services (CDS) is affected by CVE-2013-4042 and CVE-2013-5370. The IBM security bulletin confirms remote code execution vulnerabilities for all users, impacting CDS versions 4.2.1 and 5.0 up to FP2. The CVSS base score is 10 (network vector, no authentication...

CVE-2013-4042: Undefined Security Weakness

Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-5370...

CVE-2013-5370: Undefined Security Weakness

Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-4042...

PT-2013-5498

Name of the Vulnerable Software and Affected Versions IBM SPSS Collaboration and Deployment Services versions 4.2.1 and 5.0 through FP2 Description The issue allows remote attackers to execute arbitrary code via unknown vectors. Recommendations For version 4.2.1, update to a version that contains...

PT-2013-4810

Name of the Vulnerable Software and Affected Versions IBM SPSS Collaboration and Deployment Services versions 4.2.1 and 5.0 through FP2 Description The issue allows remote attackers to execute arbitrary code via unknown vectors. Recommendations For version 4.2.1, update to a version that contains...

CVE-2013-5369

IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 might allow remote attackers to execute arbitrary code by deploying and accessing a service...

CVE-2013-4047

Cross-site scripting XSS vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 allows remote attackers to inject arbitrary web script or HTML via a crafted link...

CVE-2013-4049

Unrestricted file upload vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 allows remote authenticated users to execute arbitrary code by uploading and accessing a JSP file...

CVE-2013-4048

Cross-site scripting XSS vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving addition of script to a page...

Unrestricted file upload

Unrestricted file upload vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 allows remote authenticated users to execute arbitrary code by uploading and accessing a JSP file...

Code injection

IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 might allow remote attackers to execute arbitrary code by deploying and accessing a service...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 allows remote attackers to inject arbitrary web script or HTML via a crafted link...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving addition of script to a page...

CVE-2013-4048

Cross-site scripting XSS vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving addition of script to a page...

CVE-2013-5369

IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 might allow remote attackers to execute arbitrary code by deploying and accessing a service...

CVE-2013-4047

IBM Analytical Decision Management (versions 6.0–7) contains CVE-2013-4047, a cross-site scripting (XSS) vulnerability exploitable via a crafted link that allows remote attackers to run script or HTML in a user’s browser. The IBM security bulletin documents the related set of vulnerabilities (CVE...

CVE-2013-4049

IBM Analytical Decision Management (IBM ADDM) is affected by CVE-2013-4049 across versions 6.0–7.0. The vulnerability is an unrestricted file upload that lets an attacker upload a JSP file and access it to execute arbitrary code on the server. The root cause is improper handling of uploaded files...

CVE-2013-5369

The CVE-2013-5369 issue affects IBM Analytical Decision Management (IBM ADDM) versions 6.0–7, where attackers could remotely deploy and access a malicious service, potentially enabling remote code execution. The IBM security bulletin confirms the root cause involves deploying a new service within...