CVE-2012-2173: Undefined Security Weakness

The ODBC driver in IBM Security AppScan Source 7.x and 8.x before 8.6 sends an SHA-1 hash of the connection password during connections to a solidDB database, which allows remote attackers to obtain sensitive information by sniffing the network...

PT-2012-3856

Name of the Vulnerable Software and Affected Versions IBM Security AppScan Source versions 7.x through 8.5 Description The issue allows remote attackers to obtain sensitive information by sniffing the network, as the ODBC driver sends an SHA-1 hash of the connection password during connections to...

PT-2012-3844

Name of the Vulnerable Software and Affected Versions IBM Eclipse Help System IEHS versions 7.x through 8.5 IBM Security AppScan Source versions 7.x through 8.5 IBM SPSS Data Collection Developer Library versions 6.0 through 6.0.1 Description The issue allows remote attackers to redirect users to...

CVE-2012-2161: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in deferredView.jsp in IBM Eclipse Help System IEHS, as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and 6.0.1, allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2012-2159: Improper Input Validation

Open redirect vulnerability in IBM Eclipse Help System IEHS, as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and 6.0.1, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified...