Lucene search

K
nvd[email protected]NVD:CVE-2012-5769
HistoryJan 01, 2013 - 12:35 p.m.

CVE-2012-5769

2013-01-0112:35:14
web.nvd.nist.gov
3

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

AI Score

6.8

Confidence

High

EPSS

0.006

Percentile

78.2%

IBM SPSS Modeler 14.0, 14.1, 14.2 through FP3, and 15.0 before FP2 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference.

Affected configurations

Nvd
Node
ibmspss_modelerMatch14.0.0.0
OR
ibmspss_modelerMatch14.0.0.1
OR
ibmspss_modelerMatch14.0.0.2
OR
ibmspss_modelerMatch14.1.0.0
OR
ibmspss_modelerMatch14.1.0.1
OR
ibmspss_modelerMatch14.1.0.2
OR
ibmspss_modelerMatch14.2.0.0
OR
ibmspss_modelerMatch14.2.0.1
OR
ibmspss_modelerMatch14.2.0.2
OR
ibmspss_modelerMatch14.2.0.3
OR
ibmspss_modelerMatch15.0.0.0
OR
ibmspss_modelerMatch15.0.0.1
VendorProductVersionCPE
ibmspss_modeler14.0.0.0cpe:2.3:a:ibm:spss_modeler:14.0.0.0:*:*:*:*:*:*:*
ibmspss_modeler14.0.0.1cpe:2.3:a:ibm:spss_modeler:14.0.0.1:*:*:*:*:*:*:*
ibmspss_modeler14.0.0.2cpe:2.3:a:ibm:spss_modeler:14.0.0.2:*:*:*:*:*:*:*
ibmspss_modeler14.1.0.0cpe:2.3:a:ibm:spss_modeler:14.1.0.0:*:*:*:*:*:*:*
ibmspss_modeler14.1.0.1cpe:2.3:a:ibm:spss_modeler:14.1.0.1:*:*:*:*:*:*:*
ibmspss_modeler14.1.0.2cpe:2.3:a:ibm:spss_modeler:14.1.0.2:*:*:*:*:*:*:*
ibmspss_modeler14.2.0.0cpe:2.3:a:ibm:spss_modeler:14.2.0.0:*:*:*:*:*:*:*
ibmspss_modeler14.2.0.1cpe:2.3:a:ibm:spss_modeler:14.2.0.1:*:*:*:*:*:*:*
ibmspss_modeler14.2.0.2cpe:2.3:a:ibm:spss_modeler:14.2.0.2:*:*:*:*:*:*:*
ibmspss_modeler14.2.0.3cpe:2.3:a:ibm:spss_modeler:14.2.0.3:*:*:*:*:*:*:*
Rows per page:
1-10 of 121

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

AI Score

6.8

Confidence

High

EPSS

0.006

Percentile

78.2%

Related for NVD:CVE-2012-5769