CVE-2015-0140

IBM SPSS Statistics 22.0-FP1 - Remote Code Execution via ActiveX Control

Title source: llm
STIX 2.1

Description

An unspecified ActiveX control in IBM SPSS Statistics 22.0 through FP1 on 32-bit platforms allows remote attackers to execute arbitrary code via a crafted HTML document.

References (1)

Core 1
Core References
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21697746

Scores

EPSS 0.0198
EPSS Percentile 78.5%

Details

Status published
Products (1)
ibm/spss_statistics 22.0
Published May 25, 2015
Tracked Since Feb 18, 2026