Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_appscan_source:9.0:*:*:*:*:*:*:*

part: a version: 9.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Appscan Source (d1db3b05-ee71-57f0-990f-be512e4430c1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-6123 vulnerable 2026-06-08 05:05:56.403139 Details available
IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow local users to obtain sensitive credential information by reading installation logs.
Published: 2014-12-29T02:00:00.000Z
Updated: 2024-08-06T12:10:11.782Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4812 vulnerable 2026-06-08 05:05:46.067791 Details available
The installer in IBM Security AppScan Source 8.x and 9.x through 9.0.1 has an open network port for a debug service, which allows remote attackers to obtain sensitive information by connecting to this port.
Published: 2014-10-26T18:00:00.000Z
Updated: 2024-08-06T11:27:36.931Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3072 vulnerable 2026-06-08 05:05:30.996610 Details available
Unspecified vulnerability in the Automation Server in IBM Security AppScan Source 8 through 8.0.0.2, 8.5 through 8.5.0.1, 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, and 9.0 through 9.0.0.1 allows local users to gain privileges by executing a crafted service.
Published: 2014-08-12T14:00:00.000Z
Updated: 2024-08-06T10:35:55.644Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0936 vulnerable 2026-06-08 05:05:15.161619 Details available
IBM Security AppScan Source 8.0 through 9.0, when the publish-assessment permission is not properly restricted for the configured database server, transmits cleartext assessment data, which allows remote attackers to obtain sensitive information by sniffing the network.
Published: 2014-06-08T23:00:00.000Z
Updated: 2024-08-06T09:34:41.070Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.