Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Spss Modeler
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-3038 1 Ibm 1 Spss Modeler 2017-08-29 3.6 LOW N/A
IBM SPSS Modeler 16.0 before 16.0.0.1 on UNIX does not properly drop group privileges, which allows local users to bypass intended file-access restrictions by leveraging (1) gid 0 or (2) root's group memberships.
CVE-2012-5769 1 Ibm 1 Spss Modeler 2017-08-29 5.8 MEDIUM N/A
IBM SPSS Modeler 14.0, 14.1, 14.2 through FP3, and 15.0 before FP2 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference.