Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_appscan:8.6.0.1:-:enterprise:*:*:*:*:*

part: a version: 8.6.0.1 update: -

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Appscan (85a289d0-3a41-5022-b1e1-00fdec2e9fe6)
Editionenterprise
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-5453 vulnerable 2026-06-08 05:04:51.710628 Details available
IBM Security AppScan Enterprise 5.6 through 8.7.0.1 allows remote authenticated users to read arbitrary report files by leveraging knowledge of filenames that cannot be easily predicted.
Published: 2013-11-13T15:00:00.000Z
Updated: 2024-08-06T17:15:20.323Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5450 vulnerable 2026-06-08 05:04:51.705226 Details available
IBM Security AppScan Enterprise 8.5 through 8.7.0.1, when Jazz authentication is enabled, allows man-in-the-middle attackers to obtain sensitive information or modify data by leveraging an improperly protected URL to obtain a session token.
Published: 2013-11-13T15:00:00.000Z
Updated: 2024-08-06T17:15:19.966Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5430 vulnerable 2026-06-08 05:04:51.674289 Details available
The Jazz Team Server component in IBM Security AppScan Enterprise 8.x before 8.8 has a default username and password, which makes it easier for remote authenticated users to obtain unspecified access to this component by leveraging this credential information in an environment with applicable component installation details.
Published: 2013-10-28T01:00:00.000Z
Updated: 2024-08-06T17:06:52.580Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3989 vulnerable 2026-06-08 05:04:33.440691 Details available
IBM Security AppScan Enterprise 8.x before 8.8 sends a cleartext AppScan Source database password in a response, which allows remote authenticated users to obtain sensitive information, and subsequently conduct man-in-the-middle attacks, by examining the response content.
Published: 2013-10-25T20:00:00.000Z
Updated: 2024-08-06T16:30:49.360Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2997 vulnerable 2026-06-08 05:04:29.777980 Details available
IBM Security AppScan Enterprise before 8.7 does not invalidate the session context upon a logout action, which allows remote attackers to hijack sessions by leveraging an unattended workstation.
Published: 2013-09-08T16:00:00.000Z
Updated: 2024-08-06T15:52:21.665Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0532 vulnerable 2026-06-08 05:03:48.473487 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0531 vulnerable 2026-06-08 05:03:48.472785 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0513 vulnerable 2026-06-08 05:03:48.408832 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0512 vulnerable 2026-06-08 05:03:48.407651 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0511 vulnerable 2026-06-08 05:03:48.407056 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0510 vulnerable 2026-06-08 05:03:48.406530 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0474 vulnerable 2026-06-08 05:03:48.279536 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0473 vulnerable 2026-06-08 05:03:48.272435 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.