GCVE - cpe:2.3:a:ibm:security_appscan_source:8.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_appscan_source:8.5:*:*:*:*:*:*:*

part: a version: 8.5 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Security Appscan Source (`d1db3b05-ee71-57f0-990f-be512e4430c1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-4812`	vulnerable	2026-06-08 05:05:46.063468	Details available The installer in IBM Security AppScan Source 8.x and 9.x through 9.0.1 has an open network port for a debug service, which allows remote attackers to obtain sensitive information by connecting to this port. Published: 2014-10-26T18:00:00.000Z Updated: 2024-08-06T11:27:36.931Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/95388 http://www-01.ibm.com/support/docview.wss?uid=swg21686844	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3072`	vulnerable	2026-06-08 05:05:30.992245	Details available Unspecified vulnerability in the Automation Server in IBM Security AppScan Source 8 through 8.0.0.2, 8.5 through 8.5.0.1, 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, and 9.0 through 9.0.0.1 allows local users to gain privileges by executing a crafted service. Published: 2014-08-12T14:00:00.000Z Updated: 2024-08-06T10:35:55.644Z Open on db.gcve.eu Reference links http://www-01.ibm.com/support/docview.wss?uid=swg21680537 https://exchange.xforce.ibmcloud.com/vulnerabilities/93787	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0936`	vulnerable	2026-06-08 05:05:15.159681	Details available IBM Security AppScan Source 8.0 through 9.0, when the publish-assessment permission is not properly restricted for the configured database server, transmits cleartext assessment data, which allows remote attackers to obtain sensitive information by sniffing the network. Published: 2014-06-08T23:00:00.000Z Updated: 2024-08-06T09:34:41.070Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/92317 http://www-01.ibm.com/support/docview.wss?uid=swg21674750	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2173`	vulnerable	2026-06-08 05:00:53.160665	Details available The ODBC driver in IBM Security AppScan Source 7.x and 8.x before 8.6 sends an SHA-1 hash of the connection password during connections to a solidDB database, which allows remote attackers to obtain sensitive information by sniffing the network. Published: 2012-06-20T10:00:00.000Z Updated: 2024-08-06T19:26:08.497Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/75242 http://www.ibm.com/support/docview.wss?uid=swg21598423	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2161`	vulnerable	2026-06-08 05:00:53.060760	Details available Cross-site scripting (XSS) vulnerability in deferredView.jsp in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and 6.0.1, allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Published: 2012-06-20T10:00:00.000Z Updated: 2024-08-06T19:26:08.424Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/74833 http://www.ibm.com/support/docview.wss?uid=swg21598423 http://www.ibm.com/support/docview.wss?uid=swg21596690	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2159`	vulnerable	2026-06-08 05:00:53.058180	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.