Filtered by vendor Ibm Subscriptions
Filtered by product Spss Statistics Subscriptions
Total 6 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2015-0140 1 Ibm 1 Spss Statistics 2025-04-12 N/A
An unspecified ActiveX control in IBM SPSS Statistics 22.0 through FP1 on 32-bit platforms allows remote attackers to execute arbitrary code via a crafted HTML document.
CVE-2015-7489 1 Ibm 1 Spss Statistics 2025-04-12 N/A
IBM SPSS Statistics 22.0.0.2 before IF10 and 23.0.0.2 before IF7 uses weak permissions (Everyone: Write) for Python scripts, which allows local users to gain privileges by modifying a script.
CVE-2015-8530 1 Ibm 1 Spss Statistics 2025-04-12 N/A
Stack-based buffer overflow in the Initialize function in an ActiveX control in IBM SPSS Statistics 19 and 20 before 20.0.0.2-IF0008, 21 before 21.0.0.2-IF0010, 22 before 22.0.0.2-IF0011, 23 before 23.0.0.3-IF0001, and 24 before 24.0.0.0-IF0003 allows remote authenticated users to execute arbitrary code via a long argument.
CVE-2024-31896 1 Ibm 1 Spss Statistics 2025-03-27 5.9 Medium
IBM SPSS StatisticsĀ 26.0, 27.0.1, 28.0.1, and 29.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVE-2022-43855 1 Ibm 1 Spss Statistics 2025-01-07 6.2 Medium
IBM SPSS Statistics 26.0, 27.0.1, and 28.0 could allow a local user to create multiple files that could exhaust the file handles capacity and cause a denial of service. IBM X-Force ID: 230235.
CVE-2021-38959 2 Ibm, Microsoft 2 Spss Statistics, Windows 2024-11-21 5.5 Medium
IBM SPSS Statistics for Windows 24.0, 25.0, 26.0, 27.0, 27.0.1, and 28.0 could allow a local user to cause a denial of service by writing arbitrary files to admin protected directories on the system. IBM X-Force ID: 212046.