Open redirect

Open redirect vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

Cross site request forgery (csrf)

IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote authenticated users to read application log files via a direct HTTP request...

CVE-2013-4070

IBM SPSS Collaboration and Deployment Services contains CVE-2013-4070 in the Portal application, affecting 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3. The issue allows remote attackers to discover an internal password via unspecified vectors. Remediation/fixes are available: SPSS C&D Services 4....

CVE-2013-4045

IBM SPSS Collaboration and Deployment Services is affected by CVE-2013-4045: a cross-site scripting vulnerability in the Deployment Portal, impacting SPSS C&D Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3. The root cause is a script/HTML injection vulnerability in the Portal application th...

CVE-2013-4046

Summary: A known open-redirect vulnerability (CVE-2013-4046) exists in IBM SPSS Collaboration and Deployment Services. It affects versions 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 and could enable redirects to arbitrary sites (phishing risk). Technical details confirmed in connected documents:...

CVE-2013-4070

The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to discover an internal password via unspecified vectors...

CVE-2013-4044

IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote authenticated users to read application log files via a direct HTTP request...

CVE-2013-4045

Cross-site scripting XSS vulnerability in the Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4069

The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

CVE-2013-4069

IBM SPSS Collaboration and Deployment Services is affected by CVE-2013-4069. The Deployment Portal mishandles XML external entities, enabling remote attackers to read arbitrary files via an XML external entity declaration with an entity reference. Affected versions: 4.2.1 before 4.2.1.3 IF3 and 5...

CVE-2013-4046

Open redirect vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2013-4044

IBM SPSS Collaboration and Deployment Services is affected by CVE-2013-4044. The issue allows an authenticated remote attacker to read application log files by issuing a direct HTTP request. Affected versions include 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3. The IBM bulletin documents the impa...

CVE-2013-5370

Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-4042...

Design/Logic Flaw

Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-4042...

Code injection

Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-5370...

CVE-2013-5370

Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-4042...

CVE-2013-4042

Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-5370...

CVE-2013-5370

IBM SPSS Collaboration and Deployment Services is affected by CVE-2013-5370. The Security Bulletin notes remote code execution vulnerabilities for all users of C&DS, with affected versions 5.0 (up to FP2) and 4.2.1. The CVSS base score is 10 (vector AV:N/AC:L/Au:N/C:C/I:C/A:C). Remediation provid...

CVE-2013-4042

IBM SPSS Collaboration and Deployment Services (CDS) is affected by CVE-2013-4042 and CVE-2013-5370. The IBM security bulletin confirms remote code execution vulnerabilities for all users, impacting CDS versions 4.2.1 and 5.0 up to FP2. The CVSS base score is 10 (network vector, no authentication...

Microsoft Windows Deployment Services Unattend Gatherer

This module will search remote file shares for unattended installation files that may contain domain credentials. This is often used after discovering domain credentials with the auxiliary/scanner/dcerpc/windowsdeploymentservices module or in cases where you already have domain credentials. This...