Known vulnerabilities in IBM SPSS Analytic Server - page 2

Vendor: IBM Corporation

Software: IBM SPSS Analytic Server

Software CPE: cpe:2.3:a:ibm_corporation:ibm_spss_analytic_server:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 68

Public exploits: 6

Known exploited (KEV): 2

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (68)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU130216 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2026-41417	CWE-93	Medium	No	No	-	05.05.2026	SB20260505124 SB2026051351 SB2026051901 and 5 more
#VU130215 - Resource exhaustion CVE-2026-42587	CWE-400	Medium	No	No	-	05.05.2026	SB20260505124 SB2026052040 SB20260528254 and 10 more
#VU130214 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-42581	CWE-444	Medium	No	No	-	05.05.2026	SB20260505124 SB2026052040 SB20260528254 and 10 more
#VU130212 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2026-42578	CWE-113	Medium	No	No	-	05.05.2026	SB20260505124 SB2026051907 SB20260528254 and 6 more
#VU130210 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-42585	CWE-444	Medium	No	No	-	05.05.2026	SB20260505124 SB2026052040 SB20260528254 and 11 more
#VU130205 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-42584	CWE-444	Medium	No	No	-	05.05.2026	SB20260505124 SB2026052040 SB20260528254 and 11 more
#VU124875 - Use of Hard-coded Cryptographic Key CVE-2025-14923	CWE-321	Low	No	No	-	06.04.2026	SB2026040626 SB2026040627 SB2026041006 and 14 more
#VU124423 - Allocation of Resources Without Limits or Throttling CVE-2026-33871	CWE-770	Medium	No	No	-	25.03.2026	SB2026032533 SB20260415180 SB20260422237 and 12 more
#VU124422 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-33870	CWE-444	Medium	Available	No	-	25.03.2026	SB2026032533 SB20260415180 SB2026042043 and 17 more
#VU123913 - Improper Access Control CVE-2024-29371	CWE-284	Medium	No	No	-	12.03.2026	SB2026031212 SB2026031213 SB2026031310 and 27 more
#VU122748 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-14914	CWE-22	Low	No	No	-	12.02.2026	SB2026021209 SB2026021210 SB2026021212 and 22 more
#VU120231 - Improper Validation of Certificate with Host Mismatch CVE-2025-68161	CWE-297	Medium	No	No	-	22.12.2025	SB2025122245 SB2026012084 SB2026012087 and 98 more
#VU119966 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2025-67735	CWE-93	Medium	No	No	-	15.12.2025	SB2025121552 SB2025121974 SB2026012079 and 21 more
#VU119901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-12635	CWE-79	Medium	No	No	-	12.12.2025	SB2025121283 SB2025121517 SB2025121518 and 42 more
#VU114761 - Resource exhaustion CVE-2025-58057	CWE-400	Medium	No	No	-	03.09.2025	SB2025090340 SB2025090949 SB2025101530 and 45 more
#VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-58056	CWE-444	Medium	No	No	-	03.09.2025	SB2025090340 SB2025090949 SB20251008161 and 38 more
#VU114385 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2025-54988	CWE-611	Medium	Available	No	-	22.08.2025	SB2025082219 SB2025083007 SB2025083008 and 31 more
#VU83992 - Use of Insufficiently Random Values CVE-2020-36732	CWE-330	Medium	No	No	-	08.12.2023	SB2023120804 SB2024030742 SB2025091116 and 26 more
#VU83312 - Authorization Bypass Through User-Controlled Key CVE-2023-44981	CWE-639	Medium	No	No	-	20.11.2023	SB2023112072 SB2023112073 SB2023112077 and 45 more
#VU6876 - Improper Access Control CVE-2017-5637	CWE-284	Low	No	No	-	02.06.2017	SB2017060215 SB2021072820 SB2022072128 and 3 more

Showing elements 21 - 40 out of 68

Known vulnerabilities in IBM SPSS Analytic Server - page 2

Breakdown by Severity Chart

Vulnerabilities (68)

Please verify you're human