CVE-2014-0936

no score yetEPSS 0.6%

IBM Security AppScan Source 8.0 through 9.0, when the publish-assessment permission is not properly restricted for the configured database server, transmits cleartext assessment data, which allows remote attackers to obtain sensitive information by sniffing the network.

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWEs: CWE-264, CWE-310
Published: 2014-06-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:security_appscan_source

References

http://www-01.ibm.com/support/docview.wss?uid=swg21674750
https://exchange.xforce.ibmcloud.com/vulnerabilities/92317
http://www-01.ibm.com/support/docview.wss?uid=swg21674750
https://exchange.xforce.ibmcloud.com/vulnerabilities/92317

Check your stack JSON