Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_appscan:*:-:enterprise:*:*:*:*:*

part: a version: * update: -

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Appscan (85a289d0-3a41-5022-b1e1-00fdec2e9fe6)
Editionenterprise
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-2997 vulnerable 2026-06-08 05:04:29.770173 Details available
IBM Security AppScan Enterprise before 8.7 does not invalidate the session context upon a logout action, which allows remote attackers to hijack sessions by leveraging an unattended workstation.
Published: 2013-09-08T16:00:00.000Z
Updated: 2024-08-06T15:52:21.665Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0531 vulnerable 2026-06-08 05:03:48.469843 Details available
The SSL implementation in IBM Security AppScan Enterprise before 8.7.0.1 enables cipher suites with weak encryption algorithms, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.
Published: 2013-09-08T16:00:00.000Z
Updated: 2024-08-06T14:33:05.131Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0741 vulnerable 2026-06-08 05:00:44.692444 Details available
IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not validate X.509 certificates during use of the Manual Explore Proxy feature, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary certificate.
Published: 2012-12-28T11:00:00.000Z
Updated: 2024-08-06T18:38:13.878Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0738 vulnerable 2026-06-08 05:00:44.686478 Details available
IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not validate X.509 certificates during scanning, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary certificate.
Published: 2012-12-28T11:00:00.000Z
Updated: 2024-08-06T18:38:14.205Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.