5
CVE-2013-4043
- EPSS 0.25%
- Veröffentlicht 01.02.2014 15:55:04
- Zuletzt bearbeitet 11.04.2025 00:51:21
- Quelle psirt@us.ibm.com
- CVE-Watchlists
- Unerledigt
The server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before 6.0 IF1 allows remote attackers to read arbitrary files via an unspecified HTTP request.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Spss Collaboration And Deployment Services Version4.1.1.1
Ibm ≫ Spss Collaboration And Deployment Services Version4.1.1.2
Ibm ≫ Spss Collaboration And Deployment Services Version4.1.1.3
Ibm ≫ Spss Collaboration And Deployment Services Version4.2.1
Ibm ≫ Spss Collaboration And Deployment Services Version4.2.1.1
Ibm ≫ Spss Collaboration And Deployment Services Version4.2.1.2
Ibm ≫ Spss Collaboration And Deployment Services Version4.2.1.3
Ibm ≫ Spss Collaboration And Deployment Services Version5.0.0
Ibm ≫ Spss Collaboration And Deployment Services Version5.0.0.1
Ibm ≫ Spss Collaboration And Deployment Services Version5.0.0.2
Ibm ≫ Spss Collaboration And Deployment Services Version5.0.1
Ibm ≫ Spss Collaboration And Deployment Services Version5.0.2
Ibm ≫ Spss Collaboration And Deployment Services Version6.0.0.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.25% | 0.458 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.