Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm rational appscan 5.5.0 vulnerabilities and exploits

(subscribe to this query)
534
VMScore
CVE-2012-0729
Unrestricted file upload vulnerability in IBM Rational AppScan Enterprise 5.x and 8.x prior to 8.5.0.1 allows remote authenticated users to execute arbitrary ASP.NET code by uploading a .aspx file, and then accessing it via unspecified vectors.
Ibm Rational Appscan 5.4Ibm Rational Appscan 5.5.0.1Ibm Rational Appscan 8.0.0.3Ibm Rational Appscan 8.0.0Ibm Rational Appscan 8.0.1Ibm Rational Appscan 5.5.0.2Ibm Rational Appscan 5.5.0Ibm Rational Appscan 8.0.1.1Ibm Rational Appscan 8.5.0Ibm Rational Appscan 5.2Ibm Rational Appscan 8.0.0.1Ibm Rational Appscan 8.0.0.2Ibm Rational Appscan 5.6.0.3Ibm Rational Appscan 5.6.0Ibm Rational Appscan 8.5.0.0
534
VMScore
CVE-2012-0730
Multiple cross-site request forgery (CSRF) vulnerabilities in IBM Rational AppScan Enterprise 5.x and 8.x prior to 8.5.0.1 allow remote malicious users to hijack the authentication of administrators for requests that create administrative accounts.
Ibm Rational Appscan 5.5.0.1Ibm Rational Appscan 5.5.0.2Ibm Rational Appscan 8.0.0Ibm Rational Appscan 8.0.1Ibm Rational Appscan 5.2Ibm Rational Appscan 5.4Ibm Rational Appscan 8.0.0.2Ibm Rational Appscan 8.0.0.3Ibm Rational Appscan 5.5.0Ibm Rational Appscan 5.6.0.3Ibm Rational Appscan 8.0.1.1Ibm Rational Appscan 8.5.0Ibm Rational Appscan 5.6.0Ibm Rational Appscan 8.0.0.1Ibm Rational Appscan 8.5.0.0
605
VMScore
CVE-2012-0731
IBM Rational AppScan Enterprise 5.x and 8.x prior to 8.5.0.1 does not prevent service-account impersonation, which allows remote authenticated users to read arbitrary files via unspecified vectors.
Ibm Rational Appscan 5.2Ibm Rational Appscan 5.4Ibm Rational Appscan 5.5.0.1Ibm Rational Appscan 8.0.0.3Ibm Rational Appscan 8.0.0Ibm Rational Appscan 5.5.0.2Ibm Rational Appscan 5.5.0Ibm Rational Appscan 8.0.1Ibm Rational Appscan 8.0.1.1Ibm Rational Appscan 8.0.0.1Ibm Rational Appscan 8.0.0.2Ibm Rational Appscan 5.6.0.3Ibm Rational Appscan 5.6.0Ibm Rational Appscan 8.5.0Ibm Rational Appscan 8.5.0.0
516
VMScore
CVE-2012-0732
The Enterprise Console client in IBM Rational AppScan Enterprise 5.x and 8.x prior to 8.5.0.1 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle malicious users to spoof servers and obtain sensitive information via a crafted certificate.
Ibm Rational Appscan 5.5.0.1Ibm Rational Appscan 5.5.0.2Ibm Rational Appscan 8.0.0Ibm Rational Appscan 8.0.1Ibm Rational Appscan 5.5.0Ibm Rational Appscan 5.6.0.3Ibm Rational Appscan 8.0.1.1Ibm Rational Appscan 8.5.0Ibm Rational Appscan 5.2Ibm Rational Appscan 5.4Ibm Rational Appscan 8.0.0.2Ibm Rational Appscan 8.0.0.3Ibm Rational Appscan 5.6.0Ibm Rational Appscan 8.0.0.1Ibm Rational Appscan 8.5.0.0
534
VMScore
CVE-2012-0733
IBM Rational AppScan Enterprise 5.x and 8.x prior to 8.5.0.1, when Integrated Windows authentication is used, allows remote authenticated users to obtain administrative privileges by hijacking a session associated with the service account.
Ibm Rational Appscan 5.2Ibm Rational Appscan 5.4Ibm Rational Appscan 8.0.0.2Ibm Rational Appscan 8.0.0.3Ibm Rational Appscan 5.5.0.1Ibm Rational Appscan 5.5.0.2Ibm Rational Appscan 8.0.0Ibm Rational Appscan 8.0.1Ibm Rational Appscan 5.6.0Ibm Rational Appscan 8.0.0.1Ibm Rational Appscan 8.5.0.0Ibm Rational Appscan 5.5.0Ibm Rational Appscan 5.6.0.3Ibm Rational Appscan 8.0.1.1Ibm Rational Appscan 8.5.0
676
VMScore
CVE-2012-0734
IBM Rational AppScan Enterprise 5.x and 8.x prior to 8.5.0.1 does not properly import jobs, which allows man-in-the-middle malicious users to obtain sensitive information or possibly have unspecified other impact via a crafted job.
Ibm Rational Appscan 5.2Ibm Rational Appscan 8.0.0.1Ibm Rational Appscan 8.0.0.2Ibm Rational Appscan 5.4Ibm Rational Appscan 5.5.0.1Ibm Rational Appscan 8.0.0.3Ibm Rational Appscan 8.0.0Ibm Rational Appscan 8.0.1Ibm Rational Appscan 5.6.0.3Ibm Rational Appscan 5.6.0Ibm Rational Appscan 8.5.0.0Ibm Rational Appscan 5.5.0.2Ibm Rational Appscan 5.5.0Ibm Rational Appscan 8.0.1.1Ibm Rational Appscan 8.5.0
676
VMScore
CVE-2012-0735
IBM Rational AppScan Enterprise 5.x and 8.x prior to 8.5.0.1 does not properly scan file: URLs, which allows man-in-the-middle malicious users to obtain sensitive information or possibly have unspecified other impact via a crafted URI.
Ibm Rational Appscan 8.0.0.1Ibm Rational Appscan 8.0.0.2Ibm Rational Appscan 5.2Ibm Rational Appscan 5.4Ibm Rational Appscan 8.0.0.3Ibm Rational Appscan 8.0.0Ibm Rational Appscan 5.6.0.3Ibm Rational Appscan 5.6.0Ibm Rational Appscan 8.5.0Ibm Rational Appscan 8.5.0.0Ibm Rational Appscan 5.5.0.1Ibm Rational Appscan 5.5.0.2Ibm Rational Appscan 5.5.0Ibm Rational Appscan 8.0.1Ibm Rational Appscan 8.0.1.1
828
VMScore
CVE-2012-0736
IBM Rational AppScan Enterprise 5.x and 8.x prior to 8.5.0.1 does not properly create scan jobs, which allows remote malicious users to execute arbitrary code via a crafted web site.
Ibm Rational Appscan 5.6.0Ibm Rational Appscan 8.0.0.1Ibm Rational Appscan 8.5.0.0Ibm Rational Appscan 5.2Ibm Rational Appscan 5.4Ibm Rational Appscan 8.0.0.2Ibm Rational Appscan 8.0.0.3Ibm Rational Appscan 5.5.0Ibm Rational Appscan 5.6.0.3Ibm Rational Appscan 8.0.1.1Ibm Rational Appscan 8.5.0Ibm Rational Appscan 5.5.0.1Ibm Rational Appscan 5.5.0.2Ibm Rational Appscan 8.0.0Ibm Rational Appscan 8.0.1
312
VMScore
CVE-2012-0737
Cross-site scripting (XSS) vulnerability in IBM Rational AppScan Enterprise 5.x and 8.x prior to 8.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Ibm Rational Appscan 5.6.0.3Ibm Rational Appscan 5.6.0Ibm Rational Appscan 8.5.0.0Ibm Rational Appscan 5.2Ibm Rational Appscan 8.0.0.1Ibm Rational Appscan 8.0.0.2Ibm Rational Appscan 5.5.0.2Ibm Rational Appscan 5.5.0Ibm Rational Appscan 8.0.1Ibm Rational Appscan 8.0.1.1Ibm Rational Appscan 8.5.0Ibm Rational Appscan 5.4Ibm Rational Appscan 5.5.0.1Ibm Rational Appscan 8.0.0.3Ibm Rational Appscan 8.0.0
783
VMScore
CVE-2011-1366
Unspecified vulnerability in the Import feature in IBM Rational AppScan Enterprise and AppScan Reporting Console 5.2 up to and including 7.9.x and 8.x prior to 8.0.1.1 allows remote malicious users to execute arbitrary commands on an agent server via a crafted ZIP archive.
Ibm Rational Appscan 5.4Ibm Rational Appscan 5.5.0.1Ibm Rational Appscan 5.6.0Ibm Rational Appscan 7.9.0.3Ibm Rational Appscan 7.9.0.2Ibm Rational Appscan 5.5.0.2Ibm Rational Appscan 8.0.0.2Ibm Rational Appscan 8.0.1Ibm Rational Appscan 7.8.0.2Ibm Rational Appscan 7.8.0.1Ibm Rational Appscan 5.6.0.3Ibm Rational Appscan 8.0.0Ibm Rational Appscan 7.9.0.1Ibm Rational Appscan 7.8.0Ibm Rational Appscan 7.7.0.1Ibm Rational Appscan 5.5Ibm Rational Appscan 5.5.0Ibm Rational Appscan 5.2Ibm Rational Appscan 8.0.0.1Ibm Rational Appscan 7.9.0Ibm Rational Appscan 7.7.0Ibm Rational Appscan 7.7.0.2
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook