Security Appscan Security Vulnerabilities and Issues — Security Appscan CVE List

Lucene search

IbmSecurity Appscan

9 matches found

CVE•added 2013/09/08 4:55 p.m.•47 views

CVE-2013-0531

The SSL implementation in IBM Security AppScan Enterprise before 8.7.0.1 enables cipher suites with weak encryption algorithms, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.

5CVSS6AI score0.00121EPSS

CVE•added 2014/12/23 2:59 a.m.•35 views

CVE-2014-6122

IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001 allows remote authenticated users to write to arbitrary folders, and consequently execute arbitrary comman...

5.5CVSS6.9AI score0.01343EPSS

CVE•added 2014/08/29 10:0 a.m.•32 views

CVE-2014-4806

The installation process in IBM Security AppScan Enterprise 8.x before 8.6.0.2 iFix 003, 8.7.x before 8.7.0.1 iFix 003, 8.8.x before 8.8.0.1 iFix 002, and 9.0.x before 9.0.0.1 iFix 001 on Linux places a cleartext password in a temporary file, which allows local users to obtain sensitive information...

5.5CVSS5AI score0.00044EPSS

CVE•added 2015/02/02 1:59 a.m.•31 views

CVE-2014-8918

IBM Security AppScan Standard 8.x and 9.x before 9.0.1.1 FP1 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

5.8CVSS5.8AI score0.00123EPSS

CVE•added 2012/12/28 11:48 a.m.•30 views

CVE-2012-0741

IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not validate X.509 certificates during use of the Manual Explore Proxy feature, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary certificate.

5.8CVSS6.6AI score0.00139EPSS

CVE•added 2013/10/28 3:42 a.m.•30 views

CVE-2013-5430

The Jazz Team Server component in IBM Security AppScan Enterprise 8.x before 8.8 has a default username and password, which makes it easier for remote authenticated users to obtain unspecified access to this component by leveraging this credential information in an environment with applicable compo...

5.5CVSS5.8AI score0.00154EPSS

CVE•added 2015/02/02 1:59 a.m.•29 views

CVE-2014-6136

IBM Security AppScan Standard 8.x and 9.x before 9.0.1.1 FP1 supports unencrypted sessions, which allows remote attackers to obtain sensitive information by sniffing the network.

5CVSS6.2AI score0.00225EPSS

CVE•added 2018/04/16 6:29 p.m.•29 views

CVE-2015-1952

Cross-site scripting (XSS) vulnerability in IBM AppScan Enterprise Edition 9.0.x before 9.0.2 iFix 001 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 103416.

5.4CVSS5AI score0.00129EPSS

CVE•added 2012/12/28 11:48 a.m.•28 views

CVE-2012-0738

IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not validate X.509 certificates during scanning, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary certificate.

5.8CVSS6.5AI score0.00139EPSS