Recent updates
Discover upcoming and recently added features.
Updates: AppScan on Cloud announcements, including advance notice of planned changes and
scheduled maintenance that might affect your workflow, can be found
on AppScan News. To be
notified when there is an announcement, you can subscribe to AppScan
News.
Translations: If you are reading this page in
translation, please be aware that it may not include the latest
additions. To see the latest version of this page, switch to the
English version, using the "Change Language" option at the top right
of the menu bar.
New on January 26, 2022
- Static analysis client updated to 8.0.1473.
- Support for static analysis-only scanning.
- General fixes and functionality improvements.
New on January 25, 2022
- Scan scheduler:
- Select which days of the week a scheduled scan will run
- Add a schedule to an existing scan
- Remove the schedule from a scheduled scan
- The recurrence end date (last date that a scan is scheduled to run) is now shown in the scan entry
- New issues found in a scan execution are now shown in the scan entry and in filtered issues view
- Easily change the user interface language at any time from the page header
- Switch between data centers from the landing page header
New on January 2, 2022
IAST monitoring, Java agent (version 1.9.10200):
- Improved performance
- Support Java 17
- Support communication with ASE in environment with proxy set through Java properties (https.proxyHost/https.proxyPort or http.proxyHost/http.proxyPort)
- New security features:
- XXE on JaxB class (CWE 661). This potentially vulnerable class is mentioned in this OWASP XXE documentation: https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html#jaxb-unmarshaller
- JSON XSS informational issue (CWE 79), an XSS variant of vulnerable data written to the response as JSON
New on December 28, 2021
- UI:
- Scan cards redesigned and now include a link to the issues per severity in the scan.
- Rider plugin added to the ‘Plugins & APIs’ page.
- Reports: "OWASP Top 10, 2021" added to reports and policies.
- API:
- Added ability to define the ‘Recurrence End Date’ from the post DAST scan API.
- Added support for viewing issues found for the first time in the application.
- Language property added to new SAST issues.
- General bug fixes.
New on December 17, 2021
- DAST: Added new security rule to test for the Log4j vulnerability.
New on December 15, 2021
- Static analysis client updated to 8.0.1472.
- Support for scanning RPG.
- Support for including and excluding .NET namespaces for scanning.
- Support for specifying Java parallel processing cache location in appscan-config.xml.
- Expanded .NET 5/6 analysis.
- General fixes and functionality improvements.