Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_appscan:8.5.0.0:-:enterprise:*:*:*:*:*

part: a version: 8.5.0.0 update: -

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Appscan (85a289d0-3a41-5022-b1e1-00fdec2e9fe6)
Editionenterprise
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-5453 vulnerable 2026-06-08 05:04:51.710577 Details available
IBM Security AppScan Enterprise 5.6 through 8.7.0.1 allows remote authenticated users to read arbitrary report files by leveraging knowledge of filenames that cannot be easily predicted.
Published: 2013-11-13T15:00:00.000Z
Updated: 2024-08-06T17:15:20.323Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5450 vulnerable 2026-06-08 05:04:51.705164 Details available
IBM Security AppScan Enterprise 8.5 through 8.7.0.1, when Jazz authentication is enabled, allows man-in-the-middle attackers to obtain sensitive information or modify data by leveraging an improperly protected URL to obtain a session token.
Published: 2013-11-13T15:00:00.000Z
Updated: 2024-08-06T17:15:19.966Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5430 vulnerable 2026-06-08 05:04:51.672725 Details available
The Jazz Team Server component in IBM Security AppScan Enterprise 8.x before 8.8 has a default username and password, which makes it easier for remote authenticated users to obtain unspecified access to this component by leveraging this credential information in an environment with applicable component installation details.
Published: 2013-10-28T01:00:00.000Z
Updated: 2024-08-06T17:06:52.580Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3989 vulnerable 2026-06-08 05:04:33.440637 Details available
IBM Security AppScan Enterprise 8.x before 8.8 sends a cleartext AppScan Source database password in a response, which allows remote authenticated users to obtain sensitive information, and subsequently conduct man-in-the-middle attacks, by examining the response content.
Published: 2013-10-25T20:00:00.000Z
Updated: 2024-08-06T16:30:49.360Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2997 vulnerable 2026-06-08 05:04:29.776547 Details available
IBM Security AppScan Enterprise before 8.7 does not invalidate the session context upon a logout action, which allows remote attackers to hijack sessions by leveraging an unattended workstation.
Published: 2013-09-08T16:00:00.000Z
Updated: 2024-08-06T15:52:21.665Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0532 vulnerable 2026-06-08 05:03:48.473431 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0531 vulnerable 2026-06-08 05:03:48.472732 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0513 vulnerable 2026-06-08 05:03:48.408782 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0512 vulnerable 2026-06-08 05:03:48.407596 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0511 vulnerable 2026-06-08 05:03:48.407004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0510 vulnerable 2026-06-08 05:03:48.406476 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0474 vulnerable 2026-06-08 05:03:48.279487 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0473 vulnerable 2026-06-08 05:03:48.270896 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0741 vulnerable 2026-06-08 05:00:44.692139 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0738 vulnerable 2026-06-08 05:00:44.676497 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.