« Volver al listado

CVE-2012-5769

Estado: ModificadaMedia (5.8)—

IBM SPSS Modeler 14.0, 14.1, 14.2 through FP3, and 15.0 before FP2 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Spss Modeler

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-5769",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-01-01T12:35:14.977",
  "references": [
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM79454",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21620758",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg24034122",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80316",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM79454",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21620758",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg24034122",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80316",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM SPSS Modeler 14.0, 14.1, 14.2 through FP3, and 15.0 before FP2 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference."
    },
    {
      "lang": "es",
      "value": "IBM SPSS Modeler v14.0, v14.1, v14.2 hasta FP3, y v15.0 antes de FP2 permite a atacantes remotos leer archivos de su elección, y posiblemente enviar peticiones HTTP a servidores de intranet o causar una denegación de servicio (consumo de CPU y memoria), a través de una declaración de entidad XML externa en conjunción con una referencia de entidad."
    }
  ],
  "lastModified": "2026-06-16T23:47:18.820",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:spss_modeler:14.0.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4DE33D25-8445-4BFB-8A32-81F8AE338052"
            },
            {
              "criteria": "cpe:2.3:a:ibm:spss_modeler:14.0.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D5A651CE-1085-423D-ABBC-A8DF08C1EFF6"
            },
            {
              "criteria": "cpe:2.3:a:ibm:spss_modeler:14.0.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6AB6E7A8-A844-4608-AA26-316DED9F097E"
            },
            {
              "criteria": "cpe:2.3:a:ibm:spss_modeler:14.1.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E4DCC1FE-9297-4AF5-995C-6DF4DB557E24"
            },
            {
              "criteria": "cpe:2.3:a:ibm:spss_modeler:14.1.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8A4578DA-162B-4D98-A7A3-C350B4B1F8E9"
            },
            {
              "criteria": "cpe:2.3:a:ibm:spss_modeler:14.1.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A24A08B0-AE83-41F6-9CB1-88D2ED6AA24A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:spss_modeler:14.2.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "33D6F60D-F679-4C85-B027-4323A981C339"
            },
            {
              "criteria": "cpe:2.3:a:ibm:spss_modeler:14.2.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "32783B77-DC8F-4B95-A65B-54F2F6E02ECE"
            },
            {
              "criteria": "cpe:2.3:a:ibm:spss_modeler:14.2.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E272BC66-8533-4503-A227-0FE0FE904631"
            },
            {
              "criteria": "cpe:2.3:a:ibm:spss_modeler:14.2.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2E1735E4-9732-4D01-B5E0-28A27BEE8415"
            },
            {
              "criteria": "cpe:2.3:a:ibm:spss_modeler:15.0.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7A99F1ED-82D2-47C4-A898-76290B78561C"
            },
            {
              "criteria": "cpe:2.3:a:ibm:spss_modeler:15.0.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9513A4EE-E322-4BC2-8AF5-81620EB2CAD7"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}