Multiple Vulnerabilities in IBM SPSS Allow Cross-Site Scripting, Denial of Service, and File Manipulation

72% confidence

Description

Multiple vulnerabilities in IBM SPSS can be exploited by an attacker to perform Cross-Site Scripting (XSS) attacks, Denial of Service (DoS) attacks, and file manipulation.

Affected Products

Vendor	Product	Versions
ibm	spss	—

Related News (1 articles)

Tier B

BSI Advisories3h ago

[UPDATE] [hoch] IBM SPSS: Mehrere Schwachstellen

→ No new info (linked only)

CISA KEV❌ No

Actively exploited❌ No

CWECWE-79, CWE-399, CWE-434

PublishedApr 13, 2026

Last enriched3h ago

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

MEDIUMCVE-2026-34043EXP

Serialize JavaScript to a superset of JSON that includes regular expressions and functions. Prior to version 7.0.5, there is a Denial of Service (DoS) vulnerability caused by CPU exhaustion. When seri

Trending: 54

MEDIUMCVE-2026-1561

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is vulnerable to server-side request forgery (SSRF). This may allow remote attacker to sen

Trending: 34

MEDIUMCVE-2025-14923

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.2 IBM WebSphere Application Server Liberty could provide weaker than expected security when using the Security Utility when administe

Trending: 34

HIGHCVE-2025-14914

IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.1 could allow a privileged user to upload a zip archive containing path traversal sequences resulting in an overwrite of files leading

Trending: 27

HIGHCVE-2026-1343EXP

Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

Trending: 25

Pin to Dashboard

Verification

State: reported

Confidence: 72%

Vulnerability Timeline

CVE Published

Apr 13, 2026

Discovered by ZDM

Apr 13, 2026