) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Search Results (Refine Search)
- Results Type: Overview
- Keyword (text search): cpe:2.3:a:ibm:spss_collaboration_and_deployment_services:4.2.1.3:*:*:*:*:*:*:*
- CPE Name Search: true
| Vuln ID | Summary | CVSS Severity |
|---|---|---|
| CVE-2013-4043 |
The server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before 6.0 IF1 allows remote attackers to read arbitrary files via an unspecified HTTP request. Published: February 01, 2014; 10:55:04 AM -0500 |
V3.x:(not available) V2.0: 5.0 MEDIUM |
| CVE-2013-4070 |
The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to discover an internal password via unspecified vectors. Published: December 21, 2013; 9:22:56 AM -0500 |
V3.x:(not available) V2.0: 5.0 MEDIUM |
| CVE-2013-4069 |
The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Published: December 21, 2013; 9:22:56 AM -0500 |
V3.x:(not available) V2.0: 5.0 MEDIUM |
| CVE-2013-4046 |
Open redirect vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Published: December 21, 2013; 9:22:56 AM -0500 |
V3.x:(not available) V2.0: 5.8 MEDIUM |
| CVE-2013-4045 |
Cross-site scripting (XSS) vulnerability in the Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: December 21, 2013; 9:22:56 AM -0500 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
| CVE-2013-4044 |
IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote authenticated users to read application log files via a direct HTTP request. Published: December 21, 2013; 9:22:56 AM -0500 |
V3.x:(not available) V2.0: 4.0 MEDIUM |