Known vulnerabilities in SPSS Statistics
Vendor:
IBM Corporation
Software:
SPSS Statistics
Software CPE:
cpe:2.3:a:ibm_corporation:spss_statistics:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
34
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
27.0.1.0 IF036
28.0.1.1 IF018
29.0.2.0 IF019
30.0.0.0 IF015
31.0.2.0 IF007
31.0.2.0 IF06
30.0.0.0 IF014
29.0.2.0 IF018
28.0.1.1 IF017
27.0.1.0 IF035
28.0.1.0
26.0.0.0
31.0.0.0 IF005
30.0.0.0 IF0011
29.0.2.0 IF016
28.0.1.1 IF015
27.0.1.0 IF033
27.0.1.0 IF031
28.0.1.1 IF012
29.0.2.0 IF014
30.0.0.0 IF009
31.0.0.0 IF001
30
29.0.2.0
27.0.1.0
29.0.2
29.0.1.0
29.0
25.0
26.0
25.0.0.2
26.0.0.1
27.0.1
28.0.1
28.0.1.1
Vulnerabilities (34)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU130954 - Out-of-bounds read CVE-2026-6918 |
CWE-125 | Medium | 27.0.1.0 IF036, 28.0.1.1 IF018, 29.0.2.0 IF019, 30.0.0.0 IF015, 31.0.2.0 IF007 | 11.05.2026 |
SB2026051152 SB20260528261 SB2026060168 and 10 more |
||
| #VU126758 - Improper input validation CVE-2026-22016 |
CWE-20 | Medium | 27.0.1.0 IF036, 28.0.1.1 IF018, 29.0.2.0 IF019, 30.0.0.0 IF015, 31.0.2.0 IF007 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 76 more |
||
| #VU126759 - Improper input validation CVE-2026-34282 |
CWE-20 | Medium | 27.0.1.0 IF036, 28.0.1.1 IF018, 29.0.2.0 IF019, 30.0.0.0 IF015, 31.0.2.0 IF007 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 35 more |
||
| #VU126761 - Improper input validation CVE-2026-22021 |
CWE-20 | Medium | 27.0.1.0 IF036, 28.0.1.1 IF018, 29.0.2.0 IF019, 30.0.0.0 IF015, 31.0.2.0 IF007 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 78 more |
||
| #VU126762 - Improper input validation CVE-2026-22013 |
CWE-20 | Medium | 27.0.1.0 IF036, 28.0.1.1 IF018, 29.0.2.0 IF019, 30.0.0.0 IF015, 31.0.2.0 IF007 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 75 more |
||
| #VU126763 - Improper input validation CVE-2026-22008 |
CWE-20 | Low | 27.0.1.0 IF036, 28.0.1.1 IF018, 29.0.2.0 IF019, 30.0.0.0 IF015, 31.0.2.0 IF007 | 22.04.2026 |
SB20260422123 SB2026050683 SB20260513117 and 18 more |
||
| #VU126764 - Improper input validation CVE-2026-22018 |
CWE-20 | Low | 27.0.1.0 IF036, 28.0.1.1 IF018, 29.0.2.0 IF019, 30.0.0.0 IF015, 31.0.2.0 IF007 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 76 more |
||
| #VU126765 - Improper input validation CVE-2026-22007 |
CWE-20 | Low | 27.0.1.0 IF036, 28.0.1.1 IF018, 29.0.2.0 IF019, 30.0.0.0 IF015, 31.0.2.0 IF007 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 76 more |
||
| #VU126766 - Improper input validation CVE-2026-34268 |
CWE-20 | Low | 27.0.1.0 IF036, 28.0.1.1 IF018, 29.0.2.0 IF019, 30.0.0.0 IF015, 31.0.2.0 IF007 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 76 more |
||
| #VU123884 - Integer overflow CVE-2026-23865 |
CWE-190 | Medium | 27.0.1.0 IF036, 28.0.1.1 IF018, 29.0.2.0 IF019, 30.0.0.0 IF015, 31.0.2.0 IF007 | 11.03.2026 |
SB2026031140 SB2026031141 SB2026031523 and 49 more |
||
| #VU123159 - Incorrect Calculation of Buffer Size CVE-2026-1188 |
CWE-131 | High | 28.0.1.1 IF017, 29.0.2.0 IF018, 30.0.0.0 IF014, 31.0.2.0 IF06 | 24.02.2026 |
SB2026022412 SB2026022413 SB2026022531 and 46 more |
||
| #VU121727 - Improper input validation CVE-2026-21945 |
CWE-20 | Medium | 28.0.1.1 IF017, 29.0.2.0 IF018, 30.0.0.0 IF014, 31.0.2.0 IF06 | 20.01.2026 |
SB20260120152 SB20260120153 SB20260120154 and 96 more |
||
| #VU121728 - Improper input validation CVE-2026-21932 |
CWE-20 | Medium | 28.0.1.1 IF017, 29.0.2.0 IF018, 30.0.0.0 IF014, 31.0.2.0 IF06 | 20.01.2026 |
SB20260120152 SB20260120153 SB20260120154 and 77 more |
||
| #VU121729 - Improper input validation CVE-2026-21933 |
CWE-20 | Medium | 28.0.1.1 IF017, 29.0.2.0 IF018, 30.0.0.0 IF014, 31.0.2.0 IF06 | 20.01.2026 |
SB20260120152 SB20260120153 SB20260120154 and 90 more |
||
| #VU121730 - Out-of-bounds read CVE-2026-21925 |
CWE-125 | Medium | 28.0.1.1 IF017, 29.0.2.0 IF018, 30.0.0.0 IF014, 31.0.2.0 IF06 | 20.01.2026 |
SB20260120152 SB20260120153 SB20260120154 and 92 more |
||
| #VU112940 - Improper input validation CVE-2025-30761 |
CWE-20 | Medium | 27.0.1.0 IF033, 28.0.1.1 IF012, 28.0.1.1 IF015, 29.0.2.0 IF014, 29.0.2.0 IF016, 30.0.0.0 IF009, 30.0.0.0 IF0011, 31.0.0.0 IF001, 31.0.0.0 IF005 | 16.07.2025 |
SB2025071686 SB2025071687 SB2025071688 and 77 more |
||
| #VU112941 - Improper input validation CVE-2025-30754 |
CWE-20 | Medium | 27.0.1.0 IF033, 28.0.1.1 IF012, 28.0.1.1 IF015, 29.0.2.0 IF014, 29.0.2.0 IF016, 30.0.0.0 IF009, 30.0.0.0 IF0011, 31.0.0.0 IF001, 31.0.0.0 IF005 | 16.07.2025 |
SB2025071686 SB2025071692 SB2025071783 and 108 more |
||
| #VU112937 - Improper input validation CVE-2025-30749 |
CWE-20 | High | 27.0.1.0 IF033, 28.0.1.1 IF012, 28.0.1.1 IF015, 29.0.2.0 IF014, 29.0.2.0 IF016, 30.0.0.0 IF009, 30.0.0.0 IF0011, 31.0.0.0 IF001, 31.0.0.0 IF005 | 16.07.2025 |
SB2025071686 SB2025071687 SB2025071688 and 101 more |
||
| #VU112938 - Improper input validation CVE-2025-50106 |
CWE-20 | High | 27.0.1.0 IF033, 28.0.1.1 IF012, 28.0.1.1 IF015, 29.0.2.0 IF014, 29.0.2.0 IF016, 30.0.0.0 IF009, 30.0.0.0 IF0011, 31.0.0.0 IF001, 31.0.0.0 IF005 | 16.07.2025 |
SB2025071686 SB2025071687 SB2025071688 and 100 more |
||
| #VU112130 - Heap-based Buffer Overflow CVE-2025-2900 |
CWE-122 | High | 28.0.1.1 IF017, 29.0.2.0 IF018, 30.0.0.0 IF014, 31.0.2.0 IF06 | 03.07.2025 |
SB2025070313 SB2025070316 SB2025070318 and 22 more |
Showing elements 1 - 20 out of 34