Known vulnerabilities in IBM SPSS Modeler - page 2

Software CPE: cpe:2.3:a:ibm_corporation:ibm_spss_modeler:*:*:*:*:*:*:*:*
Total vulnerabilities: 55
Public exploits: 4
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM SPSS Modeler IBM SPSS Modeler is affected by 55 known vulnerabilities: 4 high, 34 medium, 17 low Critical High Medium Low

Vulnerabilities (55)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123159 - Incorrect Calculation of Buffer Size
CVE-2026-1188
CWE-131 High
No
No
- 24.02.2026 SB2026022412
SB2026022413
SB2026022531
and 46 more
#VU121727 - Improper input validation
CVE-2026-21945
CWE-20 Medium
No
No
- 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 96 more
#VU121728 - Improper input validation
CVE-2026-21932
CWE-20 Medium
No
No
- 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 77 more
#VU121729 - Improper input validation
CVE-2026-21933
CWE-20 Medium
No
No
- 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 90 more
#VU121730 - Out-of-bounds read
CVE-2026-21925
CWE-125 Medium
No
No
- 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 92 more
#VU114385 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-54988
CWE-611 Medium
Available
Exploited
- 22.08.2025 SB2025082219
SB2025083007
SB2025083008
and 32 more
#VU101344 - Integer overflow
CVE-2024-10917
CWE-190 Low
No
No
- 09.12.2024 SB2024120927
SB2024120928
SB2024120929
and 66 more
#VU98644 - Improper input validation
CVE-2024-21235
CWE-20 Medium
No
No
- 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 129 more
#VU98645 - Improper input validation
CVE-2024-21210
CWE-20 Low
No
No
- 15.10.2024 SB20241015215
SB2024101668
SB2024101672
and 122 more
#VU98647 - Improper input validation
CVE-2024-21208
CWE-20 Low
No
No
- 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 139 more
#VU98648 - Improper input validation
CVE-2024-21217
CWE-20 Low
No
No
- 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 142 more
#VU97226 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-27267
CWE-362 Medium
No
No
- 12.09.2024 SB2024091291
SB2024091292
SB2024091618
and 57 more
#VU94559 - Improper input validation
CVE-2024-21131
CWE-20 Low
No
No
- 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 135 more
#VU94560 - Improper input validation
CVE-2024-21138
CWE-20 Low
No
No
- 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 117 more
#VU85470 - Improper input validation
CVE-2024-20919
CWE-20 Medium
No
No
- 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU83267 - Improper input validation
CVE-2023-5676
CWE-20 Low
No
No
- 20.11.2023 SB2023112010
SB2023112011
SB2023112726
and 101 more
#VU82140 - Improper input validation
CVE-2023-22067
CWE-20 Medium
No
No
- 17.10.2023 SB2023101797
SB2023101924
SB2023101990
and 117 more
#VU82141 - Improper input validation
CVE-2023-22081
CWE-20 Medium
No
No
- 17.10.2023 SB2023101797
SB2023101798
SB2023101905
and 187 more
#VU78413 - Improper input validation
CVE-2023-22045
CWE-20 Low
No
No
- 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 155 more
#VU78414 - Improper input validation
CVE-2023-22049
CWE-20 Low
No
No
- 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 164 more


Showing elements 21 - 40 out of 55