Lucene search

K
cve[email protected]CVE-2014-6119
HistoryDec 23, 2014 - 2:59 a.m.

CVE-2014-6119

2014-12-2302:59:00
CWE-94
web.nvd.nist.gov
16
ibm
security
appscan
enterprise
cve-2014-6119
remote attackers
arbitrary code
executable file
archive
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.3%

IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001 allows remote attackers to execute arbitrary code via a crafted executable file in an archive.

Affected configurations

NVD
Node
ibmsecurity_appscanMatch8.5enterprise
OR
ibmsecurity_appscanMatch8.6enterprise
OR
ibmsecurity_appscanMatch8.7enterprise
OR
ibmsecurity_appscanMatch8.8enterprise
OR
ibmsecurity_appscanMatch9.0enterprise
OR
ibmsecurity_appscanMatch9.0.0.1enterprise
OR
ibmsecurity_appscan_sourceMatch9.0.1enterprise

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.3%

Related for CVE-2014-6119