IBM Spss Collaboration And Deployment Services vulnerabilities

8 CVEs affecting IBM Spss Collaboration And Deployment Services, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-4043, published 2014-02-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-5370, published 2013-10-01. High severity, CVSS 10.0. EPSS: 4.2% chance of exploitation in the next 30 days. Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability…
CVE-2013-4042, published 2013-10-01. High severity, CVSS 10.0. EPSS: 4.2% chance of exploitation in the next 30 days. Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability…
CVE-2013-4069, published 2013-12-21. Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days. The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to read arbitrary files via an XML external entity…
CVE-2013-4043, published 2014-02-01. Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days. The server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before 6.0 IF1 allows remote attackers to read arbitrary files via an unspecified HTTP…
CVE-2013-4070, published 2013-12-21. Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days. The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to discover an internal password via unspecified vectors.
CVE-2013-4046, published 2013-12-21. Medium severity, CVSS 5.8. EPSS: 1.2% chance of exploitation in the next 30 days. Open redirect vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to redirect users to arbitrary web sites and conduct…
CVE-2013-4045, published 2013-12-21. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to inject…
CVE-2013-4044, published 2013-12-21. Medium severity, CVSS 4.0. EPSS: 1.1% chance of exploitation in the next 30 days. IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote authenticated users to read application log files via a direct HTTP request.