Vulnerability in Ibm Spss Modeler
CVE-2012-5769
IBM SPSS Modeler 14.0, 14.1, 14.2 through FP3, and 15.0 before FP2 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference.
EPSS: 0.014 (70.4th percentile) — read the EPSS interpretation.
Affected products
- Ibm Spss_modeler — versions 14.0.0.0, 14.0.0.1, 14.0.0.2
- N/a — versions n/a
References
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)
- psirt@us.ibm.com (vendor-advisory, x_refsource_AIXAPAR)
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)