Rational Appscan
Vendor:
First CVE: Mar 24, 2009 · Active for 17 years
13
Total CVEs
More Total CVEs than 91% of tracked products
4.3
Avg CVEs / Year
Higher CVE frequency than 86% of tracked products
6.6
Avg CVSS
Higher Avg CVSS than 33% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Rational Appscan over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 24, 2009
17 years ago
Most Recent CVE
May 3, 2012
5,196 days ago
CVE Severity & Scoring
Rational Appscan13 CVEs
54%
38%
All CVEs352,708 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown13 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown13 (100.0%)
User Interaction
None0 (0.0%)
Unknown13 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown13 (100.0%)
Top CVEs
Signals from CVEs in this product scope (13 CVEs).
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2011-1367HIGH Unspecified vulnerability in the File Load feature in IBM Rational AppScan Standard and Express 7.8.x, 7.9.x, and 8.0.x before 8.0.0.3 allows remote attackers to execute arbitrary | Oct 30, 2011 | 9.3 | 29 | NO | NO |
CVE-2012-0736HIGH IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not properly create scan jobs, which allows remote attackers to execute arbitrary code via a crafted web site. | May 3, 2012 | 9.3 | 27 | NO | NO |
CVE-2011-1366HIGH Unspecified vulnerability in the Import feature in IBM Rational AppScan Enterprise and AppScan Reporting Console 5.2 through 7.9.x and 8.x before 8.0.1.1 allows remote attackers to | Oct 30, 2011 | 8.8 | 26 | NO | NO |
CVE-2012-0735HIGH IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not properly scan file: URLs, which allows man-in-the-middle attackers to obtain sensitive information or possibly h | May 3, 2012 | 7.6 | 23 | NO | NO |
CVE-2012-0734HIGH IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not properly import jobs, which allows man-in-the-middle attackers to obtain sensitive information or possibly have | May 3, 2012 | 7.6 | 23 | NO | NO |
CVE-2012-0731MEDIUM IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not prevent service-account impersonation, which allows remote authenticated users to read arbitrary files via unspe | May 3, 2012 | 6.8 | 21 | NO | NO |
CVE-2012-0733MEDIUM IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1, when Integrated Windows authentication is used, allows remote authenticated users to obtain administrative privileges by | May 3, 2012 | 6.0 | 19 | NO | NO |
CVE-2012-0732MEDIUM The Enterprise Console client in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle atta | May 3, 2012 | 5.8 | 19 | NO | NO |
CVE-2012-0730MEDIUM Multiple cross-site request forgery (CSRF) vulnerabilities in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allow remote attackers to hijack the authentication of admi | May 3, 2012 | 6.0 | 19 | NO | NO |
CVE-2012-0729MEDIUM Unrestricted file upload vulnerability in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allows remote authenticated users to execute arbitrary ASP.NET code by uploadin | May 3, 2012 | 6.0 | 18 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (13 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (13 CVEs).
Media Mentions
Signals from CVEs in this product scope (13 CVEs).
Top CNAs Publishing CVEs For Rational Appscan
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 8.5.0.0 | 9 | 6.5 | 1.2% | 0 | 0 |
| 8.5.0 | 9 | 6.5 | 1.2% | 0 | 0 |
| 8.0.1.1 | 9 | 6.5 | 1.2% | 0 | 0 |
| 8.0.1 | 10 | 6.7 | 1.3% | 0 | 0 |
| 8.0.0.3 | 10 | 6.7 | 1.3% | 0 | 0 |
| 8.0.0.2 | 11 | 7.3 | 1.7% | 0 | 0 |
| 8.0.0.1 | 11 | 7.3 | 1.7% | 0 | 0 |
| 8.0.0 | 11 | 7.3 | 1.7% | 0 | 0 |
| 7.9.0.3 | 2 | 9.1 | 2.8% | 0 | 0 |
| 7.9.0.2 | 2 | 9.1 | 2.8% | 0 | 0 |
| 7.9.0.1 | 2 | 9.1 | 2.8% | 0 | 0 |
| 7.9.0 | 2 | 9.1 | 2.8% | 0 | 0 |
| 7.8.0.2 | 2 | 9.1 | 2.8% | 0 | 0 |
| 7.8.0.1 | 2 | 9.1 | 2.8% | 0 | 0 |
| 7.8.0 | 2 | 9.1 | 2.8% | 0 | 0 |
| 7.7.0.2 | 1 | 8.8 | 2.0% | 0 | 0 |
| 7.7.0.1 | 1 | 8.8 | 2.0% | 0 | 0 |
| 7.7.0 | 1 | 8.8 | 2.0% | 0 | 0 |
| 5.6.0.3 | 10 | 6.9 | 1.4% | 0 | 0 |
| 5.6.0 | 10 | 6.9 | 1.4% | 0 | 0 |