CVE-2014-6120: IBM Rational Appscan Source

Critical severity, CVSS 9.8. EPSS: 5% chance of exploitation in the next 30 days.

IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow remote attackers to execute arbitrary commands on the installation server via unspecified vectors. IBM X-Force ID: 96721.

Affected products

• IBM Rational Appscan Source: version 8.0.0.0 only; version 8.0.0.1 only; version 8.0.0.2 only; version 8.5.0.0 only; version 8.5.0.1 only
• IBM Security Appscan Source: version 8.6.0.0 only; version 8.6.0.1 only; version 8.6.0.2 only; version 8.7 only; version 8.7.0.1 only; version 8.8 only; …

Published 2018-04-12. Last modified 2026-06-17.