cbcvebase.
CVE-2014-6120
published 2018-04-12

CVE-2014-6120: IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through…

PriorityP357critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
5.11%
91.4th percentile
IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow remote attackers to execute arbitrary commands on the installation server via unspecified vectors. IBM X-Force ID: 96721.

Affected

14 ranges
VendorProductVersion rangeFixed in
ibmrational_appscan_source——
ibmrational_appscan_source——
ibmrational_appscan_source——
ibmrational_appscan_source——
ibmrational_appscan_source——
ibmsecurity_appscan_source——
ibmsecurity_appscan_source——
ibmsecurity_appscan_source——
ibmsecurity_appscan_source——
ibmsecurity_appscan_source——
ibmsecurity_appscan_source——
ibmsecurity_appscan_source——
ibmsecurity_appscan_source——
ibmsecurity_appscan_source——

CVSS provenance

nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.