Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_appscan:8.0.0.1:-:enterprise:*:*:*:*:*

part: a version: 8.0.0.1 update: -

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Appscan (85a289d0-3a41-5022-b1e1-00fdec2e9fe6)
Editionenterprise
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-5453 vulnerable 2026-06-08 05:04:51.710489 Details available
IBM Security AppScan Enterprise 5.6 through 8.7.0.1 allows remote authenticated users to read arbitrary report files by leveraging knowledge of filenames that cannot be easily predicted.
Published: 2013-11-13T15:00:00.000Z
Updated: 2024-08-06T17:15:20.323Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5430 vulnerable 2026-06-08 05:04:51.670188 Details available
The Jazz Team Server component in IBM Security AppScan Enterprise 8.x before 8.8 has a default username and password, which makes it easier for remote authenticated users to obtain unspecified access to this component by leveraging this credential information in an environment with applicable component installation details.
Published: 2013-10-28T01:00:00.000Z
Updated: 2024-08-06T17:06:52.580Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3989 vulnerable 2026-06-08 05:04:33.440545 Details available
IBM Security AppScan Enterprise 8.x before 8.8 sends a cleartext AppScan Source database password in a response, which allows remote authenticated users to obtain sensitive information, and subsequently conduct man-in-the-middle attacks, by examining the response content.
Published: 2013-10-25T20:00:00.000Z
Updated: 2024-08-06T16:30:49.360Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2997 vulnerable 2026-06-08 05:04:29.774169 Details available
IBM Security AppScan Enterprise before 8.7 does not invalidate the session context upon a logout action, which allows remote attackers to hijack sessions by leveraging an unattended workstation.
Published: 2013-09-08T16:00:00.000Z
Updated: 2024-08-06T15:52:21.665Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0532 vulnerable 2026-06-08 05:03:48.473347 Details available
Cross-site request forgery (CSRF) vulnerability in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that cause a denial of service via malformed HTTP data.
Published: 2013-03-29T10:00:00.000Z
Updated: 2024-08-06T14:33:05.862Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0531 vulnerable 2026-06-08 05:03:48.472629 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0513 vulnerable 2026-06-08 05:03:48.408691 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0512 vulnerable 2026-06-08 05:03:48.407512 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0511 vulnerable 2026-06-08 05:03:48.406918 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0510 vulnerable 2026-06-08 05:03:48.406386 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0474 vulnerable 2026-06-08 05:03:48.279401 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0473 vulnerable 2026-06-08 05:03:48.268117 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0741 vulnerable 2026-06-08 05:00:44.692122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0738 vulnerable 2026-06-08 05:00:44.676002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.