Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_appscan_source:9.0.1:*:*:*:*:*:*:*

part: a version: 9.0.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Appscan Source (d1db3b05-ee71-57f0-990f-be512e4430c1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-3035 vulnerable 2026-06-08 05:07:44.122159 Details available
IBM AppScan Source could reveal some sensitive information through the browsing of testlinks on the server.
Published: 2017-02-01T20:00:00.000Z
Updated: 2024-08-05T23:40:15.097Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3034 vulnerable 2026-06-08 05:07:44.120486 Details available
IBM AppScan Source uses a one-way hash without salt to encrypt highly sensitive information, which could allow a local attacker to decrypt information more easily.
Published: 2017-02-01T20:00:00.000Z
Updated: 2024-08-05T23:40:15.195Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6123 vulnerable 2026-06-08 05:05:56.403216 Details available
IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow local users to obtain sensitive credential information by reading installation logs.
Published: 2014-12-29T02:00:00.000Z
Updated: 2024-08-06T12:10:11.782Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6120 vulnerable 2026-06-08 05:05:56.397978 Details available
IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow remote attackers to execute arbitrary commands on the installation server via unspecified vectors. IBM X-Force ID: 96721.
Published: 2018-04-12T21:00:00.000Z
Updated: 2024-08-06T12:10:11.761Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4812 vulnerable 2026-06-08 05:05:46.069033 Details available
The installer in IBM Security AppScan Source 8.x and 9.x through 9.0.1 has an open network port for a debug service, which allows remote attackers to obtain sensitive information by connecting to this port.
Published: 2014-10-26T18:00:00.000Z
Updated: 2024-08-06T11:27:36.931Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.