Critical severity · published Apr 12, 2018
CVE-2014-6120
IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1…
9.8
CVSS
5%
EPSS
No
On KEV
Description
IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow remote attackers to execute arbitrary commands on the installation server via unspecified vectors. IBM X-Force ID: 96721.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)5.0% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
Rational Appscan Source · Ibm
8.0.0.0; 8.0.0.1; 8.0.0.2; 8.5.0.0; 8.5.0.1 · source: NVD
SA
Security Appscan Source · Ibm
8.6.0.0; 8.6.0.1; 8.6.0.2; 8.7; 8.7.0.1; 8.8; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-6120
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-6120
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/96721
More from Rational Appscan Source
–
CVE-2014-6123
IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1…