CVE-2016-0288: Undefined Security Weakness

IBM Security AppScan Standard 8.7.x, 8.8.x, and 9.x before 9.0.3.2 and Security AppScan Enterprise allow remote authenticated users to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE...

PT-2016-4131

Name of the Vulnerable Software and Affected Versions IBM Security AppScan Standard versions 8.7.x through 9.x before 9.0.3.2 IBM Security AppScan Enterprise affected versions not specified Description The issue allows remote authenticated users to read arbitrary files via an XML document...

IBM Security AppScan Standard <= 9.0.2 - OLE Automation Array Remote Code Execution Exploit

IBM Security AppScan versions 9.0.2 and below suffer from an OLE automation array remote code execution vulnerability !/usr/bin/python import BaseHTTPServer, socket IBM Security AppScan Standard OLE Automation Array Remote Code Execution Author: Naser Farhadi Linkedin:...

IBM Security AppScan Standard 9.0.2 - OLE Automation Array Remote Code Execution

!/usr/bin/python import BaseHTTPServer, socket IBM Security AppScan Standard OLE Automation Array Remote Code Execution Author: Naser Farhadi Linkedin: http://ir.linkedin.com/pub/naser-farhadi/85/b3b/909 Date: 1 June 2015 Version: function runmumaa On Error Resume Next set...

CVE-2014-8918

IBM Security AppScan Standard 8.x and 9.x before 9.0.1.1 FP1 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2015-3818

Name of the Vulnerable Software and Affected Versions IBM Security AppScan Standard versions 8.x through 9.x before 9.0.1.1 FP1 Description The issue allows remote attackers to obtain sensitive information by sniffing the network due to the support of unencrypted sessions. Recommendations For...

CVE-2014-6136: Undefined Security Weakness

IBM Security AppScan Standard 8.x and 9.x before 9.0.1.1 FP1 supports unencrypted sessions, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2014-8918: Undefined Security Weakness

IBM Security AppScan Standard 8.x and 9.x before 9.0.1.1 FP1 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2015-4124

Name of the Vulnerable Software and Affected Versions IBM Security AppScan Standard versions 8.x through 9.x before 9.0.1.1 FP1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted X.509 certificate, as the software does not...

CVE-2014-0904

The update process in IBM Security AppScan Standard 7.9 through 8.8 does not require integrity checks of downloaded files, which allows remote attackers to execute arbitrary code via a crafted file...

CVE-2014-0904: Improper Input Validation

The update process in IBM Security AppScan Standard 7.9 through 8.8 does not require integrity checks of downloaded files, which allows remote attackers to execute arbitrary code via a crafted file...

PT-2014-3933

Name of the Vulnerable Software and Affected Versions IBM Security AppScan Standard versions 7.9 through 8.8 Description The update process does not require integrity checks of downloaded files, allowing remote attackers to execute arbitrary code via a crafted file. Recommendations For IBM Securi...