CVE-2013-4048: Cross-site scripting (XSS) vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 bef...

Security readout for executives and security teams

IBM SPSS Analytical Decision Management had an authenticated cross-site scripting issue. A logged-in remote user could add script or HTML to a page, potentially affecting users who later view it. The source bundle identifies fixed levels, but gives no CVSS score or active exploitation evidence. Exposure is likely limited to organizations that still run the named IBM SPSS Analytical Decision Management versions. Risk depends on whether authenticated users can access the affected web interface and whether untrusted users have accounts. Treat as a targeted application risk, not an internet-wide emergency based on the supplied evidence. Prioritize remediation if the product is still deployed or accessible to broad internal user populations. Mitigation focus: Identify deployed IBM SPSS Analytical Decision Management versions.; Upgrade 6.1 to IF1 or later vendor-fixed level.; Upgrade 6.2 to IF1 or later vendor-fixed level..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.