IBM Spss Analytic Server vulnerabilities

2 CVEs affecting IBM Spss Analytic Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-1772, published 2019-01-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-0920, published 2014-04-10. Medium severity, CVSS 4.0. EPSS: 1.6% chance of exploitation in the next 30 days. IBM SPSS Analytic Server 1.0 before IF002 and 1.0.1 before IF004 logs cleartext passwords, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
CVE-2018-1772, published 2019-01-15. Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days. IBM SPSS Analytic Server 3.1.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality…