Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_appscan:8.6.0.2:-:enterprise:*:*:*:*:*

part: a version: 8.6.0.2 update: -

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Appscan (85a289d0-3a41-5022-b1e1-00fdec2e9fe6)
Editionenterprise
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-5453 vulnerable 2026-06-08 05:04:51.710645 Details available
IBM Security AppScan Enterprise 5.6 through 8.7.0.1 allows remote authenticated users to read arbitrary report files by leveraging knowledge of filenames that cannot be easily predicted.
Published: 2013-11-13T15:00:00.000Z
Updated: 2024-08-06T17:15:20.323Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5450 vulnerable 2026-06-08 05:04:51.705242 Details available
IBM Security AppScan Enterprise 8.5 through 8.7.0.1, when Jazz authentication is enabled, allows man-in-the-middle attackers to obtain sensitive information or modify data by leveraging an improperly protected URL to obtain a session token.
Published: 2013-11-13T15:00:00.000Z
Updated: 2024-08-06T17:15:19.966Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5430 vulnerable 2026-06-08 05:04:51.674775 Details available
The Jazz Team Server component in IBM Security AppScan Enterprise 8.x before 8.8 has a default username and password, which makes it easier for remote authenticated users to obtain unspecified access to this component by leveraging this credential information in an environment with applicable component installation details.
Published: 2013-10-28T01:00:00.000Z
Updated: 2024-08-06T17:06:52.580Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3989 vulnerable 2026-06-08 05:04:33.448973 Details available
IBM Security AppScan Enterprise 8.x before 8.8 sends a cleartext AppScan Source database password in a response, which allows remote authenticated users to obtain sensitive information, and subsequently conduct man-in-the-middle attacks, by examining the response content.
Published: 2013-10-25T20:00:00.000Z
Updated: 2024-08-06T16:30:49.360Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0532 vulnerable 2026-06-08 05:03:48.473504 Details available
Cross-site request forgery (CSRF) vulnerability in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that cause a denial of service via malformed HTTP data.
Published: 2013-03-29T10:00:00.000Z
Updated: 2024-08-06T14:33:05.862Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0531 vulnerable 2026-06-08 05:03:48.472802 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0513 vulnerable 2026-06-08 05:03:48.408847 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0512 vulnerable 2026-06-08 05:03:48.407667 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0511 vulnerable 2026-06-08 05:03:48.407072 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0510 vulnerable 2026-06-08 05:03:48.406547 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0474 vulnerable 2026-06-08 05:03:48.279552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0473 vulnerable 2026-06-08 05:03:48.272912 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.