RCE in IBM Spss Analytical Decision Management

CVE-2013-5369

IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 might allow remote attackers to execute arbitrary code by deploying and accessing a service.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.031 (86.3th percentile) — read the EPSS interpretation.

Affected products

Ibm Spss_analytical_decision_management — versions 6.1.0.0, 6.2.0.0, 7.0.0.0
N/a — versions n/a

Weakness classification (CWE)

CWE-94 — Code Injection

References

psirt@us.ibm.com (vdb-entry, x_refsource_XF)
psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)