CVE-2014-6119
IBM Security AppScan Enterprise 8.5-9.0.1 - Remote Code Execution via Crafted Executable in Archive
Title source: llmDescription
IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001 allows remote attackers to execute arbitrary code via a crafted executable file in an archive.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/96720
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1031427
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21693035
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21693183
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/62012
Scores
EPSS
0.0363
EPSS Percentile
88.1%
Details
CWE
CWE-94
Status
published
Products (7)
ibm/security_appscan
8.5
ibm/security_appscan
8.6
ibm/security_appscan
8.7
ibm/security_appscan
8.8
ibm/security_appscan
9.0
ibm/security_appscan
9.0.0.1
ibm/security_appscan_source
9.0.1
Published
Dec 23, 2014
Tracked Since
Feb 18, 2026