SA
Product
Security Appscan Source
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 2Low 0
Watch
Add Security Appscan Source to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-6120 | 9.8 | Apr 12 | IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1… Affected: 8.6.0.0; 8.6.0.1; 8.6.0.2; 8.7; 8.7.0.1; 8.8; +3 more |
| CVE-2016-3035 | 5.3 | Feb 1 | IBM AppScan Source could reveal some sensitive information through the browsing of testlinks on the server Affected: 9.0.1; 9.0.2; 9.0.3 |
| CVE-2016-3034 | 4.4 | Feb 1 | IBM AppScan Source uses a one-way hash without salt to encrypt highly sensitive information, which could allow a local attacker to decrypt information more easily Affected: 9.0.1; 9.0.2; 9.0.3 |
| CVE-2014-6123 | – | Dec 29 | IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1… Affected: 8.6.0.0; 8.6.0.1; 8.6.0.2; 8.7.0.0; 8.7.0.1; 8.8; +3 more |
| CVE-2014-6135 | – | Dec 23 | IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before… Affected: 9.0.1 |
| CVE-2014-6122 | – | Dec 23 | IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before… Affected: 9.0.1 |
| CVE-2014-6121 | – | Dec 23 | Cross-site scripting (XSS) vulnerability in IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0… Affected: 9.0.1 |
| CVE-2014-6119 | – | Dec 23 | IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before… Affected: 9.0.1 |
| CVE-2014-4812 | – | Oct 26 | The installer in IBM Security AppScan Source 8.x and 9.x through 9.0.1 has an open network port for a debug service, which allows remote attackers to obtain sensitive information… Affected: 8.0; 8.0.0.1; 8.0.0.2; 8.5; 8.5.0.1; 8.6; +9 more |
| CVE-2014-3072 | – | Aug 12 | Unspecified vulnerability in the Automation Server in IBM Security AppScan Source 8 through 8.0.0.2, 8.5 through 8.5.0.1, 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, and 9.0… Affected: 8.0; 8.0.0.1; 8.0.0.2; 8.5; 8.5.0.1; 8.6; +7 more |
| CVE-2014-0936 | – | Jun 8 | IBM Security AppScan Source 8.0 through 9.0, when the publish-assessment permission is not properly restricted for the configured database server, transmits cleartext assessment… Affected: 8.0; 8.5; 8.6; 8.7; 8.8; 9.0 |
| CVE-2012-2173 | – | Jun 20 | The ODBC driver in IBM Security AppScan Source 7.x and 8.x before 8.6 sends an SHA-1 hash of the connection password during connections to a solidDB database, which allows remote… Affected: 7.0; 8.0; 8.0.0.1; 8.0.0.2; 8.5; 8.5.0.1 |
| CVE-2012-2161 | – | Jun 20 | Cross-site scripting (XSS) vulnerability in deferredView.jsp in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data… Affected: 7.0; 8.0; 8.0.0.1; 8.0.0.2; 8.5; 8.5.0.1 |
| CVE-2012-2159 | – | Jun 20 | Open redirect vulnerability in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and… Affected: 7.0; 8.0; 8.0.0.1; 8.0.0.2; 8.5; 8.5.0.1 |
Showing 14