IBM Spss Data Collection vulnerabilities

5 CVEs affecting IBM Spss Data Collection, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-0464, published 2013-06-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-0188, published 2012-01-18. High severity, CVSS 9.3. EPSS: 3.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the SetLicenseInfoEx method in an ActiveX control in mraboutb.dll in IBM SPSS Dimensions 5.5 and SPSS Data Collection 5.6, 6.0, and 6.0.1 allows remote attackers to…
CVE-2012-0190, published 2012-01-18. High severity, CVSS 9.3. EPSS: 3.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Render method in the ExportHTML.ocx ActiveX control in ExportHTML.dll in IBM SPSS Dimensions 5.5 and SPSS Data Collection 5.6, 6.0, and 6.0.1 allows remote attackers…
CVE-2012-2159, published 2012-06-20. Medium severity, CVSS 5.8. EPSS: 1.8% chance of exploitation in the next 30 days. Open redirect vulnerability in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and 6.0.1, allows…
CVE-2013-0464, published 2013-06-03. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in IBM Eclipse Help System (IEHS) 3.4.3 and 3.6.2, as used in IBM SPSS Data Collection 6.0, 6.0.1, and 7.0, allow remote attackers to inject…
CVE-2012-2161, published 2012-06-20. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in deferredView.jsp in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer…