DoS attacks on IBM SPSS Analytic Server possible
Important security updates have been released for IBM SPSS Analytic Server.
(Image: AFANASEV IVAN/Shutterstock.com)
Attackers can exploit three vulnerabilities in IBM's data analysis platform, SPSS Analytic Server. So far, there have been no reports of attackers exploiting the vulnerabilities. However, admins should not delay too long with patching.
A warning message indicates that IBM SPSS Analytic Server 3.5 and 3.6 are vulnerable. In the article, IBM links to the security patch in the support portal for customers.
Videos by heise
Paralyse services
The three vulnerabilities (CVE-2025-55163, CVE-2025-58056, CVE-2025-58057) are categorized as “high” threat level. After successful attacks, attackers can primarily cause DoS states so that processes crash. The vulnerabilities are in the client-server framework Netty.
Just a few days ago, IBM's developers closed gaps in the AIX operating system.
(des)
