Known vulnerabilities in IBM SPSS Collaboration and Deployment Services

Vendor: IBM Corporation
Software: IBM SPSS Collaboration and Deployment Services
Software CPE: cpe:2.3:a:ibm_corporation:ibm_spss_collaboration_and_deployment_services:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 163
Public exploits: 9
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM SPSS Collaboration and Deployment Services IBM SPSS Collaboration and Deployment Services is affected by 163 known vulnerabilities: 1 critical, 18 high, 103 medium, 41 low Critical High Medium Low

Vulnerabilities (163)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146454 - Observable discrepancy
CVE-2026-59640		 CWE-203 Medium
No
No
 - 31.08.2026 SB2026083171
SB20260831105
SB2026090816
and 2 more
#VU146462 - Resource exhaustion
CVE-2026-59648		 CWE-400 Medium
No
No
 - 31.08.2026 SB2026083171
SB20260831105
SB2026090816
and 6 more
#VU146463 - Uncontrolled Memory Allocation
CVE-2026-59649		 CWE-789 Medium
No
No
 - 31.08.2026 SB2026083171
SB20260831105
SB2026090816
and 2 more
#VU139809 - Resource exhaustion
CVE-2026-9563		 CWE-400 Low
No
No
 - 28.07.2026 SB2026072815
SB2026072816
SB2026081915
and 5 more
#VU139159 - Deserialization of Untrusted Data
CVE-2026-54512		 CWE-502 High
No
No
 8.4.0.0 IF005, 8.5.0.0 IF005, 8.6.0.0 IF005 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 36 more
#VU139158 - Incomplete List of Disallowed Inputs
CVE-2026-54513		 CWE-184 High
No
No
 8.4.0.0 IF005, 8.5.0.0 IF005, 8.6.0.0 IF005 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 38 more
#VU139157 - Server-Side Request Forgery (SSRF)
CVE-2026-54514		 CWE-918 Medium
No
No
 8.4.0.0 IF005, 8.5.0.0 IF005, 8.6.0.0 IF005 22.07.2026 SB2026072278
SB2026072288
SB2026072340
and 16 more
#VU139156 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-54515		 CWE-915 Medium
No
No
 8.4.0.0 IF005, 8.5.0.0 IF005, 8.6.0.0 IF005 22.07.2026 SB2026072278
SB2026072282
SB2026072288
and 18 more
#VU139152 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-59888		 CWE-915 Medium
No
No
 8.4.0.0 IF005, 8.5.0.0 IF005, 8.6.0.0 IF005 22.07.2026 SB2026072278
SB2026072413
SB20260728138
and 10 more
#VU136794 - Resource exhaustion
CVE-2026-9171		 CWE-400 Medium
No
No
 - 02.07.2026 SB2026070280
SB2026070646
SB2026070880
and 17 more
#VU136790 - Resource exhaustion
CVE-2026-9322		 CWE-400 Medium
No
No
 - 02.07.2026 SB2026070280
SB2026070646
SB2026070880
and 17 more
#VU136712 - Resource exhaustion
CVE-2026-50645		 CWE-400 Low
No
No
 - 02.07.2026 SB2026070266
SB2026070280
SB2026070646
and 22 more
#VU136710 - Server-Side Request Forgery (SSRF)
CVE-2026-11714		 CWE-918 Low
No
No
 - 02.07.2026 SB2026070264
SB2026070820
SB2026070879
and 6 more
#VU136691 - Server-Side Request Forgery (SSRF)
CVE-2026-11546		 CWE-918 Medium
No
No
 - 02.07.2026 SB2026070237
SB2026070826
SB2026070881
and 5 more
#VU133098 - Insertion of Sensitive Information Into Sent Data
CVE-2026-44487		 CWE-201 Low
No
No
 9.0.0.0.0 IF14 31.05.2026 SB2026052927
SB2026061992
SB2026070157
and 18 more
#VU133097 - Exposure of sensitive information to an unauthorized actor
CVE-2026-44486		 CWE-200 Medium
No
No
 9.0.0.0.0 IF14 31.05.2026 SB2026052927
SB2026061992
SB2026070157
and 16 more
#VU128402 - Improper Encoding or Escaping of Output
CVE-2026-34480		 CWE-116 Medium
No
No
 - 28.04.2026 SB20260428217
SB20260513128
SB2026052632
and 22 more
#VU128401 - Improper Encoding or Escaping of Output
CVE-2026-34479		 CWE-116 Medium
No
No
 - 28.04.2026 SB20260428217
SB20260513128
SB2026052632
and 20 more
#VU128400 - Improper Output Neutralization for Logs
CVE-2026-34478		 CWE-117 Medium
No
No
 - 28.04.2026 SB20260428217
SB2026052632
SB2026052731
and 19 more
#VU128399 - Improper Certificate Validation
CVE-2026-34477		 CWE-295 Medium
No
No
 - 28.04.2026 SB20260428217
SB20260513128
SB2026052632
and 22 more


Showing elements 1 - 20 out of 163