The update process in IBM Security AppScan Standard 7.9 through 8.8 does not require integrity checks of downloaded files, which allows remote attackers to execute arbitrary code via a crafted file. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable. No vendor patch available.
IBM
RCE
Security Appscan
NVD
VulDB
CVSS 2.0
7.6
EPSS
3.8%