Описание
IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001 allows remote attackers to execute arbitrary code via a crafted executable file in an archive.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:ibm:security_appscan:8.5:*:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:security_appscan:8.6:*:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:security_appscan:8.7:*:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:security_appscan:8.8:*:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:security_appscan:9.0:*:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:security_appscan:9.0.0.1:*:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:security_appscan_source:9.0.1:*:*:*:enterprise:*:*:*
EPSS
Процентиль: 93%
0.09944
Низкий
9.3 Critical
CVSS2
Дефекты
CWE-94
Связанные уязвимости
github
больше 3 лет назад
IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001 allows remote attackers to execute arbitrary code via a crafted executable file in an archive.
EPSS
Процентиль: 93%
0.09944
Низкий
9.3 Critical
CVSS2
Дефекты
CWE-94