CVE-2013-0464

CVE-2013-0464 is an XSS vulnerability in the IBM Eclipse Help System (IEHS) shipped with multiple IBM products. The issue affects IEHS versions 3.4.3 and 3.6.2, used by IBM SPSS Data Collection (versions 6.0, 6.0.1, 7.0) and by WebSphere-related components, allowing remote attackers to inject arb...

CVE-2012-2159

CVE-2012-2159 is an open-redirect vulnerability in the IBM Eclipse Help System (IEHS) used by multiple IBM products (e.g., InfoSphere Discovery, Streams, DB2/QMF, WebSphere-related tooling). The issue arises from IEHS scripts that can redirect trusted users to untrusted sites, enabling phishing v...

CVE-2012-0188

IBM SPSS products (Dimensions 5.5 and SPSS Data Collection 5.6, 6.0, 6.0.1) are affected by CVE-2012-0188 due to a buffer overflow in the SetLicenseInfoEx() method of the mraboutb.dll ActiveX control. The vulnerability arises from copying the first parameter (strInstallDir) into a 256-byte global...

CVE-2012-2161

CVE-2012-2161 is a cross-site scripting vulnerability in the IBM Eclipse Help System (IEHS) used by multiple IBM products (e.g., InfoSphere Discovery, DB2 Information Center, Sales Center for WebSphere Commerce, IMS Explorer for Development). The flaw resides in IEHS (deferredView.jsp and related...

CVE-2012-0190

CVE-2012-0190 concerns an RCE in the IBM SPSS ExportHTML.dll ActiveX control (Render method) used by IBM SPSS Dimensions 5.5 and SPSS Data Collection 5.6, 6.0, 6.0.1. The flaw exists in the Render() method of the ExportHTML.ocx/ExportHTML.dll; a crafted HTML document can cause arbitrary file crea...