CVE-2013-4049

Published: Sep 16, 2013Modified: Apr 29, 2026

8.5

Vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Exploitability: 6.8 / Impact: 10.0

Source: NVD

Description

Unrestricted file upload vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 allows remote authenticated users to execute arbitrary code by uploading and accessing a JSP file.

Affected (3)

Products: Ibm: Spss Analytical Decision Management

Ibm

1 product

Spss Analytical Decision Management

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Spss Analytical Decision Management	Version 6.1.0.0
Ibm Spss Analytical Decision Management	Version 6.2.0.0
Ibm Spss Analytical Decision Management	Version 7.0.0.0

References (4)

http://www-01.ibm.com/support/docview.wss?uid=swg21648929

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/86442

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg21648929

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/86442

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.