Lucene search
IbmCVE-2012-5769HistoryJan 01, 2013 - 12:35 p.m.
CVE-2012-5769
2013-01-0112:35:14
ibm
web.nvd.nist.gov
18
ibm
spss modeler
14.0
14.1
14.2
15.0
vulnerability
xml
remote attack
cpu
memory
denial of service
nvd
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:N/A:P
AI Score
7
Confidence
Low
EPSS
0.006
Percentile
78.2%
IBM SPSS Modeler 14.0, 14.1, 14.2 through FP3, and 15.0 before FP2 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference.
Affected configurations
Node
ibmspss_modelerMatch14.0.0.0
ORibmspss_modelerMatch14.0.0.1
ORibmspss_modelerMatch14.0.0.2
ORibmspss_modelerMatch14.1.0.0
ORibmspss_modelerMatch14.1.0.1
ORibmspss_modelerMatch14.1.0.2
ORibmspss_modelerMatch14.2.0.0
ORibmspss_modelerMatch14.2.0.1
ORibmspss_modelerMatch14.2.0.2
ORibmspss_modelerMatch14.2.0.3
ORibmspss_modelerMatch15.0.0.0
ORibmspss_modelerMatch15.0.0.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | spss_modeler | 14.0.0.0 | cpe:2.3:a:ibm:spss_modeler:14.0.0.0:*:*:*:*:*:*:* |
| ibm | spss_modeler | 14.0.0.1 | cpe:2.3:a:ibm:spss_modeler:14.0.0.1:*:*:*:*:*:*:* |
| ibm | spss_modeler | 14.0.0.2 | cpe:2.3:a:ibm:spss_modeler:14.0.0.2:*:*:*:*:*:*:* |
| ibm | spss_modeler | 14.1.0.0 | cpe:2.3:a:ibm:spss_modeler:14.1.0.0:*:*:*:*:*:*:* |
| ibm | spss_modeler | 14.1.0.1 | cpe:2.3:a:ibm:spss_modeler:14.1.0.1:*:*:*:*:*:*:* |
| ibm | spss_modeler | 14.1.0.2 | cpe:2.3:a:ibm:spss_modeler:14.1.0.2:*:*:*:*:*:*:* |
| ibm | spss_modeler | 14.2.0.0 | cpe:2.3:a:ibm:spss_modeler:14.2.0.0:*:*:*:*:*:*:* |
| ibm | spss_modeler | 14.2.0.1 | cpe:2.3:a:ibm:spss_modeler:14.2.0.1:*:*:*:*:*:*:* |
| ibm | spss_modeler | 14.2.0.2 | cpe:2.3:a:ibm:spss_modeler:14.2.0.2:*:*:*:*:*:*:* |
| ibm | spss_modeler | 14.2.0.3 | cpe:2.3:a:ibm:spss_modeler:14.2.0.3:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2012-5769
2013-01-01 11:00:00
prion
prion
Xxe
2013-01-01 12:35:00
ibm
ibm
Security Bulletin: IBM SPSS Modeler - XML (CVE-2012-5769)
2022-09-25 23:13:40
nvd
nvd
CVE-2012-5769
2013-01-01 12:35:14
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:N/A:P
AI Score
7
Confidence
Low
EPSS
0.006
Percentile
78.2%
Related for CVE-2012-5769