VULNERABILITY INTELLIGENCE
CVE-2014-6120
CVSS score9.8 CRITICAL
EPSS probability5.01%
CISA KEVNot currently listed
Published2018-04-12
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow remote attackers to execute arbitrary commands on the installation server via unspecified vectors. IBM X-Force ID: 96721.
Weakness classification
- CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
Primary references
- psirt@us.ibm.com — VDB Entry, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — VDB Entry, Vendor Advisory