Known vulnerabilities in IBM SPSS Analytic Server

Vendor: IBM Corporation
Software: IBM SPSS Analytic Server
Software CPE: cpe:2.3:a:ibm_corporation:ibm_spss_analytic_server:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 79
Public exploits: 6
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM SPSS Analytic Server IBM SPSS Analytic Server is affected by 79 known vulnerabilities: 9 high, 53 medium, 17 low Critical High Medium Low

Vulnerabilities (79)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141319 - Improper input validation
CVE-2026-75595		 CWE-20 Medium
No
No
 - 08.08.2026 SB2026080807
SB2026091634
SB2026091654
#VU141318 - Inefficient Algorithmic Complexity
CVE-2026-75596		 CWE-407 Medium
No
No
 - 08.08.2026 SB2026080807
SB2026091654
#VU141317 - Improper Validation of Certificate with Host Mismatch
CVE-2026-62243		 CWE-297 Medium
No
No
 - 08.08.2026 SB2026080807
SB2026091654
#VU139809 - Resource exhaustion
CVE-2026-9563		 CWE-400 Low
No
No
 - 28.07.2026 SB2026072815
SB2026072816
SB2026081915
and 5 more
#VU139055 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-8646		 CWE-444 High
No
No
 - 22.07.2026 SB2026072215
SB2026072219
SB2026072328
and 19 more
#VU139054 - Resource exhaustion
CVE-2026-9320		 CWE-400 Medium
No
No
 - 22.07.2026 SB2026072214
SB2026072219
SB2026072328
and 19 more
#VU137316 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-11806		 CWE-444 Medium
No
No
 - 10.07.2026 SB2026071039
SB2026071040
SB2026071045
and 6 more
#VU137314 - Resource exhaustion
CVE-2026-9071		 CWE-400 Low
No
No
 - 10.07.2026 SB2026071036
SB2026071037
SB2026072219
and 18 more
#VU136794 - Resource exhaustion
CVE-2026-9171		 CWE-400 Medium
No
No
 - 02.07.2026 SB2026070280
SB2026070646
SB2026070880
and 17 more
#VU136790 - Resource exhaustion
CVE-2026-9322		 CWE-400 Medium
No
No
 - 02.07.2026 SB2026070280
SB2026070646
SB2026070880
and 17 more
#VU136712 - Resource exhaustion
CVE-2026-50645		 CWE-400 Low
No
No
 - 02.07.2026 SB2026070266
SB2026070280
SB2026070646
and 20 more
#VU136710 - Server-Side Request Forgery (SSRF)
CVE-2026-11714		 CWE-918 Low
No
No
 - 02.07.2026 SB2026070264
SB2026070820
SB2026070879
and 6 more
#VU136691 - Server-Side Request Forgery (SSRF)
CVE-2026-11546		 CWE-918 Medium
No
No
 - 02.07.2026 SB2026070237
SB2026070826
SB2026070881
and 5 more
#VU135124 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-11541		 CWE-444 High
No
No
 - 24.06.2026 SB2026062445
SB2026062950
SB2026063026
and 21 more
#VU133457 - Incorrect Comparison
CVE-2026-44249		 CWE-697 High
No
No
 - 08.06.2026 SB2026060813
SB20260626101
SB2026070933
and 16 more
#VU133451 - Generation of Predictable Numbers or Identifiers
CVE-2026-45673		 CWE-340 Medium
No
No
 - 08.06.2026 SB2026060813
SB20260626101
SB2026070933
and 6 more
#VU133449 - Missing Release of Resource after Effective Lifetime
CVE-2026-45536		 CWE-772 Low
No
No
 - 08.06.2026 SB2026060813
SB20260626101
SB2026070933
and 3 more
#VU132041 - Resource exhaustion
CVE-2026-4410		 CWE-400 Low
No
No
 - 21.05.2026 SB2026052124
SB2026060911
SB2026060912
and 12 more
#VU132031 - Security Features
CVE-2026-5516		 CWE-254 Low
No
No
 - 21.05.2026 SB2026052115
SB20260626104
SB2026071327
and 13 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 - 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 652 more


Showing elements 1 - 20 out of 79