CVE-2012-5769

Published: Jan 1, 2013Modified: Apr 29, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:P

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

IBM SPSS Modeler 14.0, 14.1, 14.2 through FP3, and 15.0 before FP2 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference.

Affected (12)

Products: Ibm: Spss Modeler

Ibm

1 product

Spss Modeler

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Ibm Spss Modeler	Version 14.0.0.0
Ibm Spss Modeler	Version 14.0.0.1
Ibm Spss Modeler	Version 14.0.0.2
Ibm Spss Modeler	Version 14.1.0.0
Ibm Spss Modeler	Version 14.1.0.1
Ibm Spss Modeler	Version 14.1.0.2
Ibm Spss Modeler	Version 14.2.0.0
Ibm Spss Modeler	Version 14.2.0.1
Ibm Spss Modeler	Version 14.2.0.2
Ibm Spss Modeler	Version 14.2.0.3
Ibm Spss Modeler	Version 15.0.0.0
Ibm Spss Modeler	Version 15.0.0.1