CVE-2022-43855: IBM SPSS Statistics denial of service

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-03-08 · updated 2026-06-17
Weakness: CWE-399

Description

IBM SPSS Statistics 26.0, 27.0.1, and 28.0 IO Module could allow a local user to create multiple files that could exhaust the file handles capacity and cause a denial of service.

Affected products

IBM SPSS Statistics: 26.0.0.0, 27.0.1.0, 28.0.0.0

References

https://www.ibm.com/support/pages/node/7130881
https://exchange.xforce.ibmcloud.com/vulnerabilities/239235
https://www.ibm.com/support/pages/node/7130881

Get alerted when CVE-2022-43855 or the next vulnerability affects your stack