Security Appscan Source@8.0.0.2 Security Vulnerabilities and Issues — Security Appscan Source@8.0.0.2 CVE List

Lucene search

IbmSecurity Appscan Source8.0.0.2

5 matches found

CVE•added 2012/06/20 10:27 a.m.•59 views

CVE-2012-2159

Open redirect vulnerability in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and 6.0.1, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified ve...

5.8CVSS8.7AI score0.0035EPSS

CVE•added 2012/06/20 10:27 a.m.•45 views

CVE-2012-2161

Cross-site scripting (XSS) vulnerability in deferredView.jsp in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and 6.0.1, allows remote attackers to inject arbitrary web script or HTML via a crafted UR...

4.3CVSS5.3AI score0.0035EPSS

CVE•added 2014/08/12 2:55 p.m.•34 views

CVE-2014-3072

Unspecified vulnerability in the Automation Server in IBM Security AppScan Source 8 through 8.0.0.2, 8.5 through 8.5.0.1, 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, and 9.0 through 9.0.0.1 allows local users to gain privileges by executing a crafted service.

7.2CVSS6.5AI score0.00146EPSS

CVE•added 2012/06/20 10:27 a.m.•32 views

CVE-2012-2173

The ODBC driver in IBM Security AppScan Source 7.x and 8.x before 8.6 sends an SHA-1 hash of the connection password during connections to a solidDB database, which allows remote attackers to obtain sensitive information by sniffing the network.

5CVSS6.3AI score0.00225EPSS

CVE•added 2014/10/26 6:55 p.m.•31 views

CVE-2014-4812

The installer in IBM Security AppScan Source 8.x and 9.x through 9.0.1 has an open network port for a debug service, which allows remote attackers to obtain sensitive information by connecting to this port.

1.8CVSS6.2AI score0.0011EPSS