ibm appscan source vulnerabilities

Latest ibm appscan source CVEs

Newest publication first

1. CVE-2016-3035 IBM AppScan Source could reveal some sensitive information through the browsing of testlinks on the server.

   Published 2017-02-01

   Medium·CVSS 5.3 EPSS 1.0%

   IBM AppScan Source could reveal some sensitive information through the browsing of testlinks on the server.

2. CVE-2016-3034 IBM AppScan Source uses a one-way hash without salt to encrypt highly sensitive information, which could allow a local attacker to decrypt information more easily.

   Published 2017-02-01

   Medium·CVSS 4.4 EPSS 0.21%

   IBM AppScan Source uses a one-way hash without salt to encrypt highly sensitive information, which could allow a local attacker to decrypt information more easily.

3. CVE-2016-3033 IBM AppScan Source 8.7 through 9.0.3.3 allows remote authenticated users to read arbitrary files or cause a denial of service (memory consumption) via an XML document containing an external entity dec...

   Published 2016-12-01

   High·CVSS 8.1 EPSS 1.4%

   IBM AppScan Source 8.7 through 9.0.3.3 allows remote authenticated users to read arbitrary files or cause a denial of service (memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Ent...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.