CVE-2015-1952: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM AppScan Enterprise Edition 9.0.x before 9.0.2 iFix 001 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 103416...

PT-2018-4349

Name of the Vulnerable Software and Affected Versions IBM AppScan Enterprise Edition versions 9.0.x before 9.0.2 iFix 001 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For IBM AppScan Enterprise...

CVE-2016-9981: Session Fixation

IBM AppScan Enterprise Edition 9.0 contains an unspecified vulnerability that could allow an attacker to hijack a valid user's session. IBM X-Force ID: 120257...

IBM AppScan Enterprise Edition Arbitrary Code Execution Vulnerability

IBM AppScan Enterprise Edition is a security vulnerability scanning solution. A security vulnerability exists in IBM AppScan Enterprise Edition that allows remote attackers to exploit the vulnerability to build malicious content that can be parsed by users and can execute arbitrary code...

CVE-2016-6042: Improper Restriction of Operations within the Bounds of a Memory Buffer

IBM AppScan Enterprise Edition could allow a remote attacker to execute arbitrary code on the system, caused by improper handling of objects in memory. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system in...

CVE-2009-3745: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the help pages in IBM Rational AppScan Enterprise Edition 5.5.0.2 allows remote attackers to inject arbitrary web script or HTML via the query string...