Spss Modeler (Ibm) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 29 known versions, newest CVE from 2023-06-22. Vendor: Ibm.

CVEs of Spss Modeler

• CVE-2023-33842 - CVSS 6.2 (medium), 2023-06-22: IBM SPSS Modeler on Windows 17.0, 18.0, 18.2.2, 18.3, 18.4, and 18.5 requires the end user to have access to the server SSL key which could allow a local user…
• CVE-2020-4717 - CVSS 6.2 (medium), 2021-03-10: A vulnerability exists in IBM SPSS Modeler Subscription Installer that allows a user with create symbolic link permission to write arbitrary file in another…
• CVE-2013-6739 - CVSS 5.4 (medium), 2018-04-27: IBM SPSS Modeler before 16 on UNIX allows remote authenticated users to bypass intended access restrictions via an SSO token. IBM X-Force ID: 89855.
• CVE-2015-4991 - CVSS 4 (medium), 2016-02-15: IBM SPSS Modeler 14.2 through FP3 IF027, 15 through FP3 IF015, 16 through FP2 IF012, 17 through FP1 IF018, and 17.1 through IF008 includes unspecified…
• CVE-2014-3038 - CVSS 3.6 (low), 2014-06-08: IBM SPSS Modeler 16.0 before 16.0.0.1 on UNIX does not properly drop group privileges, which allows local users to bypass intended file-access restrictions by…
• CVE-2012-5769 - CVSS 5.8 (medium), 2013-01-01: IBM SPSS Modeler 14.0, 14.1, 14.2 through FP3, and 15.0 before FP2 allows remote attackers to read arbitrary files, and possibly send HTTP requests to…