CVE-2013-4069

Published: Dec 21, 2013Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Affected (7)

Products: Ibm: Spss Collaboration And Deployment Services

Ibm

1 product

Spss Collaboration And Deployment Services

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Ibm Spss Collaboration And Deployment Services	Version 4.2.1.1
Ibm Spss Collaboration And Deployment Services	Version 4.2.1.2
Ibm Spss Collaboration And Deployment Services	Version 4.2.1.3
Ibm Spss Collaboration And Deployment Services	Version 4.2.1
Ibm Spss Collaboration And Deployment Services	Version 5.0.0.1
Ibm Spss Collaboration And Deployment Services	Version 5.0.0.2
Ibm Spss Collaboration And Deployment Services	Version 5.0.0