← Vulnerability feed

Vulnerability record · CVE-2014-6119 · published 23 December 2014

CVE-2014-6119: Ibm security appscan code injection vulnerability

Ibm · Security Appscan

IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001 allows remote attackers to execute arbitrary code via a crafted executable file in an archive.

9.3 CVSS 2.0 High EPSS 3.6% · top 10.9% CWE-94 · Code injection
9.3CVSS 2.0 base score
3.6%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
10References
17 Jun 2026Last modified by NVD

Description

IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001 allows remote attackers to execute arbitrary code via a crafted executable file in an archive.

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/62012
http://www-01.ibm.com/support/docview.wss?uid=swg21693035 Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21693183
http://www.securitytracker.com/id/1031427
https://exchange.xforce.ibmcloud.com/vulnerabilities/96720
http://secunia.com/advisories/62012
http://www-01.ibm.com/support/docview.wss?uid=swg21693035 Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21693183
http://www.securitytracker.com/id/1031427
https://exchange.xforce.ibmcloud.com/vulnerabilities/96720

Track CVE-2014-6119 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2014-6120Ibm rational appscan source command injection vulnerabilityIBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.…EPSS 5.0%8.1CVE-2016-9981Ibm security appscan vulnerabilityIBM AppScan Enterprise Edition 9.0 contains an unspecified vulnerability that could allow an attacker to hijack a valid user's session. IBM X-Force I…EPSS 1.4%7.6CVE-2014-0904Ibm security appscan improper input validation vulnerabilityThe update process in IBM Security AppScan Standard 7.9 through 8.8 does not require integrity checks of downloaded files, which allows remote attack…EPSS 3.1%7.3CVE-2016-6042Ibm security appscan memory buffer overflow vulnerabilityIBM AppScan Enterprise Edition could allow a remote attacker to execute arbitrary code on the system, caused by improper handling of objects in memor…EPSS 2.6%7.2CVE-2014-3072Ibm security appscan source vulnerabilityUnspecified vulnerability in the Automation Server in IBM Security AppScan Source 8 through 8.0.0.2, 8.5 through 8.5.0.1, 8.6 through 8.6.0.2, 8.7 th…EPSS 0.37%7.2CVE-2013-0513Ibm security appscan vulnerabilityIBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 create a service that lacks " (doubl…EPSS 0.33%6.8CVE-2013-0532Ibm security appscan cross-site request forgery vulnerabilityCross-site request forgery (CSRF) vulnerability in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x …EPSS 0.63%6.5CVE-2016-0288Ibm security appscan vulnerabilityIBM Security AppScan Standard 8.7.x, 8.8.x, and 9.x before 9.0.3.2 and Security AppScan Enterprise allow remote authenticated users to read arbitrary…EPSS 1.5%

Source: NIST National Vulnerability Database (record CVE-2014-6119), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.