CVE-2014-6135

CWE-20 — Improper Input Validation3 documents3 sources
Severity
4.3MEDIUM
EPSS
0.2%
top 52.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Security AppscanIBM Security Appscan Source
Timeline
PublishedDec 23
Latest updateMay 17

Description

IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001 allows remote attackers to conduct clickjacking attacks via unspecified vectors.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

▶NVDibm/security_appscan6 versions+5

🔴Vulnerability Details

2
GHSA
GHSA-xvc3-gx4p-pvr6: IBM Security AppScan Enterprise 8↗2022-05-17
▶
CVEList
CVE-2014-6135: IBM Security AppScan Enterprise 8↗2014-12-23
▶
CVE-2014-6135 (MEDIUM CVSS 4.3) | IBM Security AppScan Enterprise 8.5 | cvebase.io