Unscored severity · published Dec 21, 2013
CVE-2013-4069
The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to read arbitrary files via an XML…
–
CVSS
1.5%
EPSS
No
On KEV
Description
The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
Spss Collaboration And Deployment Services · Ibm
4.2.1; 4.2.1.1; 4.2.1.2; 4.2.1.3; 5.0.0; 5.0.0.1; +1 more · source: NVD
Affected product
SC
Spss Collaboration And Deployment Services
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4069
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4069
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1PM95817
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21660191
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/86621
More from Spss Collaboration And Deployment Services
–
CVE-2013-4043
The server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before 6.0 IF1 allows remote attackers to read arbitrary files via…
–
CVE-2013-4070
The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to discover an internal password via…
–
CVE-2013-4046
Open redirect vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to redirect users to arbitrary…
–
CVE-2013-4045
Cross-site scripting (XSS) vulnerability in the Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote…
–
CVE-2013-4044
IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote authenticated users to read application log files via a direct HTTP…