{
    "id": "CVE-2014-6120",
    "published": "2018-04-12 21:29:00",
    "last_modified": "2026-06-17 00:12:36",
    "cvss_score": "9.8",
    "cvss_severity": "CRITICAL",
    "cvss_version": "3.0",
    "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "cwe": "CWE-77",
    "description": "IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow remote attackers to execute arbitrary commands on the installation server via unspecified vectors. IBM X-Force ID: 96721.",
    "epss_score": "0.05014",
    "epss_percentile": "0.92024",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 0,
    "updated_at": "2026-10-07 18:17:12",
    "priority": {
        "rank": 3,
        "label": "In your normal cycle",
        "why": "Critical by CVSS (9.8), but no sign of active exploitation."
    },
    "products": [
        {
            "vendor": "ibm",
            "product": "rational_appscan_source"
        },
        {
            "vendor": "ibm",
            "product": "security_appscan_source"
        }
    ],
    "kev_detail": null,
    "exploits": [],
    "refs_list": [
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/96721",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/96721"
    ]
}