Skip to content
OpenAdvisories
High WID-SEC-2026-3536 3 CVEs

IBM SPSS Analytic Server und SPSS Modeler: Mehrere Schwachstellen

Published Sep 22, 2026 · Updated Sep 22, 2026 · de-DE

Vendor: IBM Product: SPSS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM SPSS Analytic Server und SPSS Modeler ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und SQL-Injection-Angriffe durchzuführen.

Product

IBM SPSS ist ein umfassendes Set von Daten- und prognostischen Analyse-Tools für Geschäftsbenutzer, Analysten und Statistik-Programmierer.

Vulnerabilities 3

  • Critical 9.8
    CVE-2026-49845

    Apache Hive: SQL Injection vulnerability in HiveMetaStore partition-name direct-SQL paths

    SQL injection in Hive Metastore direct SQL partition-name resolution in Apache Hive before 4.2.1 on all platforms allows authenticated users with access to Hive Metastore APIs to read, modify, or affect unintended partition metadata (including statistics upda…

    Apache Software Foundation Apache Hive
  • Critical 9.1
    CVE-2026-55976

    Apache Hive: SSRF vulnerability in Hive Avro Serde due to Insufficient input validation on avro.schema.url

    Server-Side Request Forgery (SSRF) in Avro SerDe schema resolution in Apache Hive before 4.2.1 allows an authenticated remote attacker with CREATE TABLE privilege to cause the Hive server to fetch an attacker-controlled URL when resolving the avro.schema.url …

    Apache Software Foundation Apache Hive
  • Medium 4.3
    CVE-2017-12625

    Moderate severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service

    Apache Hive 2.1.x before 2.1.2, 2.2.x before 2.2.1, and 2.3.x before 2.3.1 expose an interface through which masking policies can be defined on tables or views, e.g., using Apache Ranger. When a view is created over a given table, the policy enforcement does …

    Apache Software Foundation Apache Hive org.apache.hive:hive-exec org.apache.hive:hive Maven

Revision history

  1. #1

    Initiale Fassung

References