VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Feb 2, 2015· Updated May 6, 2026

CVE-2014-6136

CVE-2014-6136

Description

IBM Security AppScan Standard 8.x and 9.x before 9.0.1.1 FP1 supports unencrypted sessions, which allows remote attackers to obtain sensitive information by sniffing the network.

Affected products

15
  • IBM/Security Appscan15 versions
    cpe:2.3:a:ibm:security_appscan:8.0.0.0:*:*:*:standard:*:*:*+ 14 more
    • cpe:2.3:a:ibm:security_appscan:8.0.0.0:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:security_appscan:8.0.0.1:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:security_appscan:8.0.0.2:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:security_appscan:8.0.0.3:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:security_appscan:8.5.0.0:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:security_appscan:8.5.0.1:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:security_appscan:8.6.0.0:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:security_appscan:8.6.0.1:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:security_appscan:8.7.0.0:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:security_appscan:8.7.0.1:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:security_appscan:8.8.0.0:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:security_appscan:9.0.0.0:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:security_appscan:9.0.0.1:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:security_appscan:9.0.1.0:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:security_appscan:9.0.1.1:*:*:*:standard:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.