CVE-2012-0734: Undefined Security Weakness

IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not properly import jobs, which allows man-in-the-middle attackers to obtain sensitive information or possibly have unspecified other impact via a crafted job...

CVE-2012-0730: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allow remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

PT-2012-2821

Name of the Vulnerable Software and Affected Versions IBM Rational AppScan Enterprise versions 5.x and 8.x before 8.5.0.1 Description The issue allows remote authenticated users to execute arbitrary ASP.NET code by uploading a .aspx file. This can be achieved by accessing the uploaded file via...

CVE-2012-0737: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0733: Undefined Security Weakness

IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1, when Integrated Windows authentication is used, allows remote authenticated users to obtain administrative privileges by hijacking a session associated with the service account...

PT-2012-2829

Name of the Vulnerable Software and Affected Versions IBM Rational AppScan Enterprise versions 5.x through 8.x before 8.5.0.1 IBM Rational AppScan Enterprise version 8.x before 8.5.0.1 can be consolidated into the previous line, so it is omitted to avoid duplication. Description A cross-site...

CVE-2012-0729: Undefined Security Weakness

Unrestricted file upload vulnerability in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allows remote authenticated users to execute arbitrary ASP.NET code by uploading a .aspx file, and then accessing it via unspecified vectors...

PT-2012-2825

Name of the Vulnerable Software and Affected Versions IBM Rational AppScan Enterprise versions 5.x and 8.x before 8.5.0.1 Description The issue allows remote authenticated users to obtain administrative privileges by hijacking a session associated with the service account when Integrated Windows...

PT-2012-2822

Name of the Vulnerable Software and Affected Versions IBM Rational AppScan Enterprise versions 5.x and 8.x before 8.5.0.1 Description The issue allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts due to multiple cross-site reques...

CVE-2012-0735: Improper Input Validation

IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not properly scan file: URLs, which allows man-in-the-middle attackers to obtain sensitive information or possibly have unspecified other impact via a crafted URI...

CVE-2012-0731: Exposure of Sensitive Information to an Unauthorized Actor

IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not prevent service-account impersonation, which allows remote authenticated users to read arbitrary files via unspecified vectors...

PT-2012-2823

Name of the Vulnerable Software and Affected Versions IBM Rational AppScan Enterprise versions 5.x and 8.x before 8.5.0.1 Description The issue allows remote authenticated users to read arbitrary files via unspecified vectors due to the lack of prevention of service-account impersonation...

PT-2012-2827

Name of the Vulnerable Software and Affected Versions IBM Rational AppScan Enterprise versions 5.x and 8.x before 8.5.0.1 Description The issue allows man-in-the-middle attackers to obtain sensitive information or possibly have unspecified other impact via a crafted URI, due to improper scanning ...

IBM Rational AppScan企业平台验证代码执行漏洞

Bugtraq ID: 53247 CVE ID：CVE-2012-0736 IBM Rational AppScan是一款Web应用的安全测试工具，可以在开发生命周期中进行自动化动态和静态安全漏洞扫描。 IBM Rational AppScan企业版在某些配置下创建扫描作业时存在错误，允许远程攻击者执行任意代码。诱使用户扫描恶意WEB站，可在目标用户系统上执行任意代码。 0 IBM Rational Policy Tester 8.5 IBM Rational AppScan Reporting Console 8.0.1.1 IBM Rational AppScan Reportin...

CVE-2011-1366: Undefined Security Weakness

Unspecified vulnerability in the Import feature in IBM Rational AppScan Enterprise and AppScan Reporting Console 5.2 through 7.9.x and 8.x before 8.0.1.1 allows remote attackers to execute arbitrary commands on an agent server via a crafted ZIP archive...

PT-2011-3086

Name of the Vulnerable Software and Affected Versions IBM Rational AppScan Enterprise and AppScan Reporting Console versions 5.2 through 7.9.x IBM Rational AppScan Enterprise and AppScan Reporting Console versions 8.x before 8.0.1.1 Description The issue allows remote attackers to execute arbitra...

CVE-2009-3745: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the help pages in IBM Rational AppScan Enterprise Edition 5.5.0.2 allows remote attackers to inject arbitrary web script or HTML via the query string...

CVE-2009-1056

IBM Rational AppScan Enterprise before 5.5 FP1 allows remote attackers to read arbitrary exported reports by "forcefully browsing."...

CVE-2009-1056: Undefined Security Weakness

IBM Rational AppScan Enterprise before 5.5 FP1 allows remote attackers to read arbitrary exported reports by "forcefully browsing."...