Description
IBM AppScan Enterprise Edition could allow a remote attacker to execute arbitrary code on the system, caused by improper handling of objects in memory. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system in the same context as the victim.
Metrics
CVSS 3.0 7.3/10
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| IBM Corporation | AppScan Enterprise | 8.6; 8.6.0.1; 5.2; 5.4; 5.5; 5.6; 8.0; 8.5; 8.7.0.0; 8.7.0.1; 8.7; 8.8; 8.9; 9.0; 9.0.1; 9; 9.0.2; 9.0.3; 9.0.3.1; 9.0.3.4 |
References
- http://www.ibm.com/support/docview.wss?uid=swg21995118Patch, Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21995118Patch, Vendor Advisory
Timeline
- Published
- Feb 1, 2017
- Last modified
- Jun 17, 2026
- NVD status
- Modified