CVE-2012-0735: IBM Rational Appscan

High severity, CVSS 7.6. EPSS: 1.3% chance of exploitation in the next 30 days.

IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not properly scan file: URLs, which allows man-in-the-middle attackers to obtain sensitive information or possibly have unspecified other impact via a crafted URI.

Affected products

• IBM Rational Appscan: version 5.2 only; version 5.4 only; version 5.5.0 only; version 5.5.0.1 only; version 5.5.0.2 only; version 5.6.0 only; …

Published 2012-05-03. Last modified 2026-06-16.