Vulnerabilities > IBM > Rational Appscan Source

DATE CVE VULNERABILITY TITLE RISK
2018-04-12 CVE-2014-6120 Command Injection vulnerability in IBM Rational Appscan Source and Security Appscan Source
IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow remote attackers to execute arbitrary commands on the installation server via unspecified vectors.
network
low complexity
ibm CWE-77
critical
10.0
2014-12-29 CVE-2014-6123 Information Exposure vulnerability in IBM Rational Appscan Source and Security Appscan Source
IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow local users to obtain sensitive credential information by reading installation logs.
local
low complexity
ibm CWE-200
2.1