CVE-2012-5769

IBM SPSS Modeler 14.0, 14.1, 14.2 through FP3, and 15.0 before FP2 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference.

🔗 References (8)

• psirt@ushttp://www-01.ibm.com/support/docview.wss?uid=swg1PM79454
• psirt@ushttp://www-01.ibm.com/support/docview.wss?uid=swg21620758
• psirt@ushttp://www-01.ibm.com/support/docview.wss?uid=swg24034122
• psirt@ushttps://exchange.xforce.ibmcloud.com/vulnerabilities/80316
• af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg1PM79454
• af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21620758
• af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg24034122
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/80316