CVE-2013-4046: Open redirect vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and...

Security readout for executives and security teams

IBM SPSS Collaboration and Deployment Services could be abused to send users from a trusted IBM-hosted service URL to an arbitrary website. The main business risk is phishing: an attacker can make a malicious link look more credible by starting on a legitimate service. Exposure is limited to organizations running the affected IBM SPSS Collaboration and Deployment Services versions, especially user-accessible web deployments. Internet-facing instances increase phishing usefulness, but internal portals can still be abused against employees. Schedule remediation with normal security patching urgency, higher if the service is internet-facing or trusted by many employees. This issue supports phishing rather than direct system compromise based on the provided evidence. Mitigation focus: Upgrade IBM SPSS CDS 4.2.1 to 4.2.1.3 IF3 or later.; Upgrade IBM SPSS CDS 5.0 to FP3 or later.; Review IBM advisory and APAR guidance for supported remediation details..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.