CVE-2021-38959

MEDIUM 5.5CVE-2021-38959 · Published 17/11/2021 · updated 17/06/2026

In short

CVE-2021-38959 is a MEDIUM (CVSS 5.5) vulnerability affecting spss statistics (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.22%, higher than 13.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
spss statistics ibm	`= 24.0.0.0= 25.0.0.0= 26.0.0.0= 27.0.0.0= 27.0.1.0= 28.0.0.0`	No fix yet

Description

IBM SPSS Statistics for Windows 24.0, 25.0, 26.0, 27.0, 27.0.1, and 28.0 could allow a local user to cause a denial of service by writing arbitrary files to admin protected directories on the system. IBM X-Force ID: 212046.

References

exchange.xforce.ibmcloud.com/vulnerabilities/212046 · VDB Entry
ibm.com/support/pages/node/6516680 · Vendor Advisory

More vulnerabilities in spss statistics

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

spss statistics

ibm

= 24.0.0.0= 25.0.0.0= 26.0.0.0= 27.0.0.0= 27.0.1.0= 28.0.0.0

No fix yet

More vulnerabilities in spss statistics

See all →