CVE-2014-6121: Cross-site scripting (XSS) vulnerability in IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 be...

Security readout for executives and security teams

CVE-2014-6121 is an authenticated cross-site scripting issue in older IBM Security AppScan Enterprise releases. A logged-in user could use a crafted URL to inject web script or HTML into the application. Business risk depends on whether these legacy AppScan portals still exist and who can access them. Exposure is most likely in organizations still running legacy IBM Security AppScan Enterprise versions. Risk is higher where the application is reachable by many internal users, contractors, or the internet. Systems already updated beyond the named iFix levels are not indicated as affected by the provided sources. Medium priority for most environments, higher if an affected AppScan Enterprise portal is internet-facing or used by many users. Because this is authenticated XSS in legacy security tooling, treat it as a targeted exposure cleanup and verify whether the product still exists in the environment. Mitigation focus: Upgrade affected AppScan Enterprise versions to the named IBM iFix levels or later.; Review IBM advisory guidance before applying any production change.; Restrict AppScan Enterprise access to trusted authenticated users only..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.