CVE-2014-0904
published 2014-03-26CVE-2014-0904: The update process in IBM Security AppScan Standard 7.9 through 8.8 does not require integrity checks of downloaded files, which allows remote attackers to…
PriorityP343high7.6CVSS 2.0
AVNACHAuNCCICAC
EPSS
3.05%
86.1th percentile
The update process in IBM Security AppScan Standard 7.9 through 8.8 does not require integrity checks of downloaded files, which allows remote attackers to execute arbitrary code via a crafted file.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | security_appscan | — | — |
| ibm | security_appscan | — | — |
| ibm | security_appscan | — | — |
| ibm | security_appscan | — | — |
| ibm | security_appscan | — | — |
| ibm | security_appscan | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
IBM Security AppScan up to 7.9 input validation (ID 124201 / XFDB-91536)
vuldb·2026-05-09·CVSS 7.6
CVE-2014-0904 [HIGH] IBM Security AppScan up to 7.9 input validation (ID 124201 / XFDB-91536)
A vulnerability, which was classified as critical, has been found in IBM Security AppScan up to 7.9. This vulnerability affects unknown code. Performing a manipulation results in improper input validation.
This vulnerability is known as CVE-2014-0904. Remote exploitation of the attack is possible. No exploit is available.
GHSA
GHSA-pm6r-74pf-9qrm: The update process in IBM Security AppScan Standard 7
ghsa_unreviewed·2022-05-17
CVE-2014-0904 [HIGH] CWE-20 GHSA-pm6r-74pf-9qrm: The update process in IBM Security AppScan Standard 7
The update process in IBM Security AppScan Standard 7.9 through 8.8 does not require integrity checks of downloaded files, which allows remote attackers to execute arbitrary code via a crafted file.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2014-03-26
Published