CVEvulnerability

CVE-2012-5769

5.8 MEDIUM Published 2013-01-01 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-01-01
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:P

Description

IBM SPSS Modeler 14.0, 14.1, 14.2 through FP3, and 15.0 before FP2 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference.

Affected configurations

• ibm spss modeler 14.0.0.0 • ibm spss modeler 14.0.0.1 • ibm spss modeler 14.0.0.2 • ibm spss modeler 14.1.0.0 • ibm spss modeler 14.1.0.1 • ibm spss modeler 14.1.0.2 • ibm spss modeler 14.2.0.0 • ibm spss modeler 14.2.0.1 • ibm spss modeler 14.2.0.2 • ibm spss modeler 14.2.0.3 • ibm spss modeler 15.0.0.0 • ibm spss modeler 15.0.0.1

References