5
CVE-2013-4043
- EPSS 1.35%
- Veröffentlicht 01.02.2014 15:55:04
- Zuletzt bearbeitet 29.04.2026 01:13:23
- Erkennungen
LoginThe server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before 6.0 IF1 allows remote attackers to read arbitrary files via an unspecified HTTP request.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Spss Collaboration And Deployment Services Version 4.1.1.1
Ibm ≫ Spss Collaboration And Deployment Services Version 4.1.1.2
Ibm ≫ Spss Collaboration And Deployment Services Version 4.1.1.3
Ibm ≫ Spss Collaboration And Deployment Services Version 4.2.1
Ibm ≫ Spss Collaboration And Deployment Services Version 4.2.1.1
Ibm ≫ Spss Collaboration And Deployment Services Version 4.2.1.2
Ibm ≫ Spss Collaboration And Deployment Services Version 4.2.1.3
Ibm ≫ Spss Collaboration And Deployment Services Version 5.0.0
Ibm ≫ Spss Collaboration And Deployment Services Version 5.0.0.1
Ibm ≫ Spss Collaboration And Deployment Services Version 5.0.0.2
Ibm ≫ Spss Collaboration And Deployment Services Version 5.0.1
Ibm ≫ Spss Collaboration And Deployment Services Version 5.0.2
Ibm ≫ Spss Collaboration And Deployment Services Version 6.0.0.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.35% | 0.68 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
http://www-01.ibm.com/support/docview.wss?uid=swg1PI07828
http://www-01.ibm.com/support/docview.wss?uid=swg21661169
https://exchange.xforce.ibmcloud.com/vulnerabilities/86419