IBM Spss Analytical Decision Management vulnerabilities

4 CVEs affecting IBM Spss Analytical Decision Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-5369, published 2013-09-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-5369, published 2013-09-16. High severity, CVSS 9.3. EPSS: 3.1% chance of exploitation in the next 30 days. IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 might allow remote attackers to execute arbitrary code by deploying and accessing a service.
CVE-2013-4049, published 2013-09-16. High severity, CVSS 8.5. EPSS: 2.2% chance of exploitation in the next 30 days. Unrestricted file upload vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 allows remote authenticated users to execute arbitrary code by…
CVE-2013-4047, published 2013-09-16. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 allows remote attackers to inject arbitrary web script or…
CVE-2013-4048, published 2013-09-16. Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 allows remote authenticated users to inject arbitrary web…