IBM Rational Policy Tester vulnerabilities

9 CVEs affecting IBM Rational Policy Tester, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-4062, published 2013-09-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-0473, published 2013-03-29. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allow remote attackers to…
CVE-2013-0512, published 2013-03-29. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Stack-based buffer overflow in the Manual Explore browser plug-in for Firefox in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4…
CVE-2013-0474, published 2013-03-29. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. The Manual Explore browser plug-in in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote attackers to discover test…
CVE-2013-4061, published 2013-09-09. Medium severity, CVSS 4.0. EPSS: 0.9% chance of exploitation in the next 30 days. IBM Rational Policy Tester 8.5 before 8.5.0.5 does not properly check authorization for changes to the set of authentication hosts, which allows remote authenticated users to perform spoofing attacks…
CVE-2013-0532, published 2013-03-29. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote attackers to hijack…
CVE-2012-0741, published 2012-12-28. Medium severity, CVSS 5.8. EPSS: 0.6% chance of exploitation in the next 30 days. IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not validate X.509 certificates during use of the Manual Explore Proxy feature, which allows…
CVE-2012-0738, published 2012-12-28. Medium severity, CVSS 5.8. EPSS: 0.6% chance of exploitation in the next 30 days. IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not validate X.509 certificates during scanning, which allows man-in-the-middle attackers to spoof SSL…
CVE-2013-4062, published 2013-09-09. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. IBM Rational Policy Tester 8.5 before 8.5.0.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof Jazz Team servers, obtain sensitive information,…
CVE-2013-0513, published 2013-03-29. High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 create a service that lacks " (double quote) characters in the service path, which…