IBM SPSS

Name: IBM SPSS
Brand: IBM

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical11high3medium0low

updated 2026-10-28

vulnerabilities (22)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-59057US	—	0.50% (43rd)	Exploit	9.0.0.0 IF002	2026-01-10	< 9.0.0.0 IF002
CVE-2017-12625US	medium4.3	1.43% (73rd)	—	no fix	2017-11-01	4 versions
CVE-2025-31672US	—	1.35% (71st)	—	8.5.0.0-IM-SCaDS-REPOSITORYSERVER-IF025	2025-04-09	< 8.5.0.0-IM-SCaDS-REPOSITORYSERVER-IF025
CVE-2026-55976US	—	1.04% (64th)	—	no fix	2026-08-25	5 versions
CVE-2026-49845US	—	0.89% (59th)	—	no fix	2026-08-25	4 versions
CVE-2026-87795US	high8.2	0.63% (50th)	—	19.0.0.0 IF030	2026-09-09	< 19.0.0.0 IF030
CVE-2026-90559US	high7.5	0.63% (50th)	—	19.0.0.0 IF030	2026-09-12	< 19.0.0.0 IF030
CVE-2026-90560US	high8.2	0.62% (49th)	—	19.0.0.0 IF030	2026-09-12	< 19.0.0.0 IF030
CVE-2026-90852US	high7.3	0.54% (45th)	—	19.0.0.0 IF030	2026-09-15	< 19.0.0.0 IF030
CVE-2026-21884US	—	0.53% (45th)	—	9.0.0.0 IF002	2026-01-10	< 9.0.0.0 IF002
CVE-2026-87823US	high8.2	0.43% (37th)	—	19.0.0.0 IF030	2026-09-09	< 19.0.0.0 IF030
CVE-2025-64718US	—	0.42% (36th)	—	9.0.0.0 IF002	2025-11-13	< 9.0.0.0 IF002
CVE-2026-87824US	high7.5	0.39% (33rd)	—	19.0.0.0 IF030	2026-09-09	< 19.0.0.0 IF030
CVE-2026-73334US	—	0.36% (30th)	—	19.0.0.0 IF030	2026-09-09	< 19.0.0.0 IF030
CVE-2024-22361US	high7.5OT elevated	0.32% (25th)	—	8.5-CDS-SemeruJRE17.0.12	2024-02-10	< 8.5-CDS-SemeruJRE17.0.12
CVE-2026-87877US	high7.7	0.22% (13th)	—	19.0.0.0 IF030	2026-09-09	< 19.0.0.0 IF030
CVE-2026-87825US	high7.7	0.21% (12th)	—	19.0.0.0 IF030	2026-09-09	< 19.0.0.0 IF030
CVE-2024-31896US	high7.5OT elevated	0.20% (10th)	—	no fix	2025-03-25	3 versions
CVE-2026-15075US	high7.5	0.20% (9th)	—	no fix	2026-07-14	≤ Analytic Server <4.0 IF007
CVE-2026-22030US	—	0.19% (8th)	—	9.0.0.0 IF002	2026-01-10	< 9.0.0.0 IF002
CVE-2026-15432US	medium5.9	0.18% (8th)	—	no fix	2026-07-21	≤ Modeler <19.0.0.0
CVE-2026-89045US	medium4.0	0.18% (7th)	—	19.0.0.0 IF030	2026-09-10	< 19.0.0.0 IF030

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read3 CVEs
CWE-416Use After Free3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-327Use of a Broken or Risky Cryptographic Algorithm2 CVEs
CWE-346Origin Validation Error2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)22 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan