Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_appscan:8.7.0.1:-:enterprise:*:*:*:*:*

part: a version: 8.7.0.1 update: -

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Appscan (85a289d0-3a41-5022-b1e1-00fdec2e9fe6)
Editionenterprise
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-5453 vulnerable 2026-06-08 05:04:51.710676 Details available
IBM Security AppScan Enterprise 5.6 through 8.7.0.1 allows remote authenticated users to read arbitrary report files by leveraging knowledge of filenames that cannot be easily predicted.
Published: 2013-11-13T15:00:00.000Z
Updated: 2024-08-06T17:15:20.323Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5450 vulnerable 2026-06-08 05:04:51.705276 Details available
IBM Security AppScan Enterprise 8.5 through 8.7.0.1, when Jazz authentication is enabled, allows man-in-the-middle attackers to obtain sensitive information or modify data by leveraging an improperly protected URL to obtain a session token.
Published: 2013-11-13T15:00:00.000Z
Updated: 2024-08-06T17:15:19.966Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5430 vulnerable 2026-06-08 05:04:51.675779 Details available
The Jazz Team Server component in IBM Security AppScan Enterprise 8.x before 8.8 has a default username and password, which makes it easier for remote authenticated users to obtain unspecified access to this component by leveraging this credential information in an environment with applicable component installation details.
Published: 2013-10-28T01:00:00.000Z
Updated: 2024-08-06T17:06:52.580Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3989 vulnerable 2026-06-08 05:04:33.450140 Details available
IBM Security AppScan Enterprise 8.x before 8.8 sends a cleartext AppScan Source database password in a response, which allows remote authenticated users to obtain sensitive information, and subsequently conduct man-in-the-middle attacks, by examining the response content.
Published: 2013-10-25T20:00:00.000Z
Updated: 2024-08-06T16:30:49.360Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.