{"id":"CVE-2013-4043","aliases":["EUVD-2013-3974","GHSA-7p2q-j7qw-jq24"],"status":"published","title":"The server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5...","description":"The server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before 6.0 IF1 allows remote attackers to read arbitrary files via an unspecified HTTP request.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01354,"percentile":0.71799,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2014-02-01T15:00:00Z","modified":"2026-06-16T23:56:31Z","products":[{"vendor":"ibm","product":"spss_collaboration_and_deployment_services"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/86419","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI07828","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21661169","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4043"},{"url":"https://github.com/advisories/GHSA-7p2q-j7qw-jq24"}],"sources":{"cve":[{"id":"CVE-2013-4043","description":"The server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before 6.0 IF1 allows remote attackers to read arbitrary files via an unspecified HTTP request.","status":"published","published":"2014-02-01T15:00:00Z","modified":"2024-08-06T16:30:49.836Z","updated_at":"2026-11-02T14:34:57.869657Z"}],"euvd":[{"id":"EUVD-2013-3974","description":"The server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before 6.0 IF1 allows remote attackers to read arbitrary files via an unspecified HTTP request.","status":"published","published":"2014-02-01T15:00:00Z","modified":"2024-08-06T16:30:49Z","updated_at":"2026-11-03T01:56:33.663204Z"}],"ghsa":[{"id":"GHSA-7p2q-j7qw-jq24","title":"The server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5...","description":"The server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before 6.0 IF1 allows remote attackers to read arbitrary files via an unspecified HTTP request.","status":"published","published":"2022-05-17T01:33:31Z","modified":"2023-02-03T05:04:35Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:53:35.259064Z"}],"nvd":[{"id":"CVE-2013-4043","description":"The server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before 6.0 IF1 allows remote attackers to read arbitrary files via an unspecified HTTP request.","status":"published","published":"2014-02-01T15:55:04.01Z","modified":"2026-06-16T23:56:31.387Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:48.062712Z"}]}}