Improper input validation in IBM Spss Collaboration And Deployment Services
CVE-2013-4046
Open redirect vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.012 (64.1th percentile) — read the EPSS interpretation.
Affected products
- Ibm Spss_collaboration_and_deployment_services — versions 4.2.1, 4.2.1.1, 4.2.1.2
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (vendor-advisory, x_refsource_AIXAPAR)