CVE-2013-4044

IBM SPSS Collaboration and Deployment Services is affected by CVE-2013-4044. The issue allows an authenticated remote attacker to read application log files by issuing a direct HTTP request. Affected versions include 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3. The IBM bulletin documents the impa...

CVE-2013-4045

IBM SPSS Collaboration and Deployment Services is affected by CVE-2013-4045: a cross-site scripting vulnerability in the Deployment Portal, impacting SPSS C&D Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3. The root cause is a script/HTML injection vulnerability in the Portal application th...

CVE-2013-4069

IBM SPSS Collaboration and Deployment Services is affected by CVE-2013-4069. The Deployment Portal mishandles XML external entities, enabling remote attackers to read arbitrary files via an XML external entity declaration with an entity reference. Affected versions: 4.2.1 before 4.2.1.3 IF3 and 5...

CVE-2013-4070

IBM SPSS Collaboration and Deployment Services contains CVE-2013-4070 in the Portal application, affecting 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3. The issue allows remote attackers to discover an internal password via unspecified vectors. Remediation/fixes are available: SPSS C&D Services 4....

CVE-2013-4046

Summary: A known open-redirect vulnerability (CVE-2013-4046) exists in IBM SPSS Collaboration and Deployment Services. It affects versions 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 and could enable redirects to arbitrary sites (phishing risk). Technical details confirmed in connected documents:...

CVE-2013-4070

The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to discover an internal password via unspecified vectors...

PT-2013-4811

Name of the Vulnerable Software and Affected Versions IBM SPSS Collaboration and Deployment Services versions 4.2.1 through 4.2.1.3 IF2 and version 5.0 before FP3 Description The issue allows remote authenticated users to read application log files via a direct HTTP request. Recommendations For...

PT-2013-4812

Name of the Vulnerable Software and Affected Versions IBM SPSS Collaboration and Deployment Services versions 4.2.1 through 4.2.1.3 IF2 IBM SPSS Collaboration and Deployment Services versions 5.0 through FP2 Description A cross-site scripting XSS issue exists in the Portal application, allowing...

PT-2013-4813

Name of the Vulnerable Software and Affected Versions IBM SPSS Collaboration and Deployment Services versions 4.2.1 through 4.2.1.3 IF2 IBM SPSS Collaboration and Deployment Services versions 5.0 through FP2 Description The issue allows remote attackers to redirect users to arbitrary web sites an...

PT-2013-4832

Name of the Vulnerable Software and Affected Versions IBM SPSS Collaboration and Deployment Services versions 4.2.1 through 4.2.1.3 IF2 IBM SPSS Collaboration and Deployment Services versions 5.0 through FP2 Description The issue allows remote attackers to discover an internal password via...

PT-2013-4831

Name of the Vulnerable Software and Affected Versions IBM SPSS Collaboration and Deployment Services versions 4.2.1 through 4.2.1.3 IF2 IBM SPSS Collaboration and Deployment Services versions 5.0 through FP2 Description The issue allows remote attackers to read arbitrary files via an XML external...

CVE-2013-4044: Exposure of Sensitive Information to an Unauthorized Actor

IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote authenticated users to read application log files via a direct HTTP request...

CVE-2013-4069: Exposure of Sensitive Information to an Unauthorized Actor

The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

CVE-2013-4046: Improper Input Validation

Open redirect vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2013-4045: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4070: Exposure of Sensitive Information to an Unauthorized Actor

The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to discover an internal password via unspecified vectors...

[CrowdRE] Reverse Engineering Tool

A new project called CrowdRE aims to make it easy for the reverse engineering of complex applications working in collaboration with other users. Normally, the process reversing software from a complicated binary can consume much time, CrowdRE will help accelerate this process through teamwork...

CVE-2013-5426

Session fixation vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 IF5 and 11.0 before IF1 and InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 IF11 allows remote authenticated users to hijack web sessions via...

Cisco WebExCollaboration Partner Access控制台跨站脚本漏洞

Bugtraq ID:64288 CVE ID:CVE-2013-6961 Cisco WebEx是一款网络会议解决方案。 Cisco WebEx Meeting Center Collaboration Partner Access Console CPAC存在一个跨站脚本漏洞，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，可获取敏感信息或劫持用户会话。 0 Cisco WebEx Meeting Center 厂商补丁： Cisco ----- 用户可参考如下厂商提供的安全公告获得补丁信息：...

PT-2013-6202

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meeting Center affected versions not specified Description A cross-site scripting XSS issue exists in the Collaboration Partner Access Console CPAC of Cisco WebEx Meeting Center. This allows remote attackers to inject arbitrary web...