← Back

CVE-2021-38959

nvd nist
Published: Nov 17, 2021Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

IBM SPSS Statistics for Windows 24.0, 25.0, 26.0, 27.0, 27.0.1, and 28.0 could allow a local user to cause a denial of service by writing arbitrary files to admin protected directories on the system. IBM X-Force ID: 212046.

Affected (6)

Products: Ibm: Spss Statistics
Ibm
1 product
Spss Statistics
Configuration A
6 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ibm
Spss Statistics
Version 24.0.0.0
Spss Statistics
Version 25.0.0.0
Spss Statistics
Version 26.0.0.0
Spss Statistics
Version 27.0.0.0
Spss Statistics
Version 27.0.1.0
Spss Statistics
Version 28.0.0.0
Running on/withPlatform Versions
Microsoft
Windows
All versions

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (4)

Source: psirt@us.ibm.com
VDB EntryVendor Advisory
Source: psirt@us.ibm.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
VDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.