CVE-2024-31896CWE-327

IBM SPSS Statistics information disclosure

Medium · published March 25, 2025

CVSS v3.1
5.9
EPSS
0%
Percentile
9.6
In the wild
Unconfirmed
What it is

IBM SPSS Statistics 26.0, 27.0.1, 28.0.1, and 29.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00202 · 9.6th percentile
Weakness
CWE-327 · Use of a Broken or Risky Cryptographic Algorithm
Published
2025-03-25T18:58Z
EPSS history
Timeline
  • 25 MAR 18:58Z
    IBM SPSS Statistics information disclosure
    cvelistv5