Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM SPSS Collaboration and Deployment Services XML外部实体注入引用信息泄露漏洞
Vulnerability Description
IBM SPSS Collaboration and Deployment Services是美国IBM公司的一套分析决策管理解决方案。该方案可提供实时预测分析服务,并针对预测结果提供相应的解决方案。 IBM SPSS Collaboration and Deployment Services 4.2.1和5.0版本中的Portal应用程序中存在信息泄露漏洞。远程攻击者可借助特制的文档利用该漏洞读取任意文件,获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A