Ibm

Rational Appscan

13 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.6

CVE-2012-0735

  • EPSS 0.52%
  • Veröffentlicht 03.05.2012 04:08:25
  • Zuletzt bearbeitet 11.04.2025 00:51:21

IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not properly scan file: URLs, which allows man-in-the-middle attackers to obtain sensitive information or possibly have unspecified other impact via a crafted URI.

9.3

CVE-2012-0736

  • EPSS 3.83%
  • Veröffentlicht 03.05.2012 04:08:25
  • Zuletzt bearbeitet 11.04.2025 00:51:21

IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not properly create scan jobs, which allows remote attackers to execute arbitrary code via a crafted web site.

3.5

CVE-2012-0737

  • EPSS 0.21%
  • Veröffentlicht 03.05.2012 04:08:25
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

6

CVE-2012-0729

  • EPSS 0.48%
  • Veröffentlicht 03.05.2012 04:08:24
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Unrestricted file upload vulnerability in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allows remote authenticated users to execute arbitrary ASP.NET code by uploading a .aspx file, and then accessing it via unspecified vectors.

6

CVE-2012-0730

  • EPSS 0.12%
  • Veröffentlicht 03.05.2012 04:08:24
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple cross-site request forgery (CSRF) vulnerabilities in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allow remote attackers to hijack the authentication of administrators for requests that create administrative accounts.

6.8

CVE-2012-0731

  • EPSS 0.28%
  • Veröffentlicht 03.05.2012 04:08:24
  • Zuletzt bearbeitet 11.04.2025 00:51:21

IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not prevent service-account impersonation, which allows remote authenticated users to read arbitrary files via unspecified vectors.

5.8

CVE-2012-0732

  • EPSS 0.18%
  • Veröffentlicht 03.05.2012 04:08:24
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The Enterprise Console client in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted ...

6

CVE-2012-0733

  • EPSS 0.41%
  • Veröffentlicht 03.05.2012 04:08:24
  • Zuletzt bearbeitet 11.04.2025 00:51:21

IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1, when Integrated Windows authentication is used, allows remote authenticated users to obtain administrative privileges by hijacking a session associated with the service account.

7.6

CVE-2012-0734

  • EPSS 0.52%
  • Veröffentlicht 03.05.2012 04:08:24
  • Zuletzt bearbeitet 11.04.2025 00:51:21

IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not properly import jobs, which allows man-in-the-middle attackers to obtain sensitive information or possibly have unspecified other impact via a crafted job.

8.8

CVE-2011-1366

  • EPSS 0.95%
  • Veröffentlicht 30.10.2011 10:55:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Unspecified vulnerability in the Import feature in IBM Rational AppScan Enterprise and AppScan Reporting Console 5.2 through 7.9.x and 8.x before 8.0.1.1 allows remote attackers to execute arbitrary commands on an agent server via a crafted ZIP archi...