Vulnerabilities > CVE-2012-5769 - XML Parsing Unspecified Security vulnerability in IBM SPSS Modeler

047910
CVSS 5.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
PARTIAL
network
ibm
NVD
Published: 2013-01-01
Updated: 2017-08-29

Summary

IBM SPSS Modeler 14.0, 14.1, 14.2 through FP3, and 15.0 before FP2 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference.

Vulnerable Configurations

Part Description Count
Application
Ibm
12

References