CVE-2015-1952: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM AppScan Enterprise Edition 9.0.x before 9.0.2 iFix 001 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 103416...

PT-2018-4349

Name of the Vulnerable Software and Affected Versions IBM AppScan Enterprise Edition versions 9.0.x before 9.0.2 iFix 001 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For IBM AppScan Enterprise...

CVE-2016-9981: Session Fixation

IBM AppScan Enterprise Edition 9.0 contains an unspecified vulnerability that could allow an attacker to hijack a valid user's session. IBM X-Force ID: 120257...

PT-2017-10408

Name of the Vulnerable Software and Affected Versions IBM AppScan Enterprise Edition version 9.0 Description The issue allows an attacker to hijack a valid user's session. Recommendations For IBM AppScan Enterprise Edition version 9.0, at the moment, there is no information about a newer version...

CVE-2016-6042

IBM AppScan Enterprise Edition could allow a remote attacker to execute arbitrary code on the system, caused by improper handling of objects in memory. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system in...

CVE-2016-6042: Improper Restriction of Operations within the Bounds of a Memory Buffer

IBM AppScan Enterprise Edition could allow a remote attacker to execute arbitrary code on the system, caused by improper handling of objects in memory. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system in...

PT-2017-8864

Name of the Vulnerable Software and Affected Versions IBM AppScan Enterprise Edition affected versions not specified Description The issue is caused by improper handling of objects in memory, allowing a remote attacker to execute arbitrary code on the system. An attacker could exploit this by...