Vulnerability Details CVE-2014-4812
The installer in IBM Security AppScan Source 8.x and 9.x through 9.0.1 has an open network port for a debug service, which allows remote attackers to obtain sensitive information by connecting to this port.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 30.2%
CVSS Severity
CVSS v2 Score 1.8
References
Products affected by CVE-2014-4812
-
cpe:2.3:a:ibm:security_appscan_source:8.0
-
cpe:2.3:a:ibm:security_appscan_source:8.0.0.1
-
cpe:2.3:a:ibm:security_appscan_source:8.0.0.2
-
cpe:2.3:a:ibm:security_appscan_source:8.5
-
cpe:2.3:a:ibm:security_appscan_source:8.5.0.1
-
cpe:2.3:a:ibm:security_appscan_source:8.6
-
cpe:2.3:a:ibm:security_appscan_source:8.6.0.1
-
cpe:2.3:a:ibm:security_appscan_source:8.6.0.2
-
cpe:2.3:a:ibm:security_appscan_source:8.7
-
cpe:2.3:a:ibm:security_appscan_source:8.7.0.0
-
cpe:2.3:a:ibm:security_appscan_source:8.7.0.1
-
cpe:2.3:a:ibm:security_appscan_source:8.8
-
cpe:2.3:a:ibm:security_appscan_source:9.0
-
cpe:2.3:a:ibm:security_appscan_source:9.0.0.1
-
cpe:2.3:a:ibm:security_appscan_source:9.0.1