CVE-2014-0920

IBM SPSS Analytic Server versions 1.0.0.0 (before IF002) and 1.0.1.0 (before IF004) are affected by CVE-2014-0920, which causes logs to contain passwords in plaintext, allowing authenticated remote users to obtain sensitive information via unspecified vectors. The vulnerability is addressed by IB...

CVE-2018-1772

The CVE-2018-1772 entries indicate IBM SPSS Analytic Server 3.1.1.1 is vulnerable to cross-site scripting, allowing an attacker to inject arbitrary JavaScript in the Web UI and potentially disclose credentials within a trusted session. Root cause is a Web UI XSS flaw in the affected version. IBM’...