What's New

What's new in AppScan® Source version 10.10.0

November, 2025

HCL® AppScan® Source version 10.10.0 is the eighteenth fix pack release since the release of HCL® AppScan® Source major version 10.0.0.

Fixes and security updates are listed here.

When uninstalling AppScan® Source version 10.10.0 from a Linux environment, you may encounter the message:
```
JVMJ9VM253W Setting the java.compiler system property is obsolete in version 21 and later, use -Xint instead
```
This message can be ignored. The uninstall process completes properly.

Upgrading from any earlier version of AppScan® Source that uses SolidDB automatically removes all SolidDB-related files from the AppScan® Source installation.
Tomcat 8 is no longer included in the AppScan® Source installation package.
Support for Windows 10 will be removed in the next version of AppScan® Source.
JDK 11 is no longer included in the AppScan® Source installation package.

June, 2025

HCL® AppScan® Source version 10.9.0 is the seventeenth fix pack release since the release of HCL® AppScan® Source major version 10.0.0.

AppScan® Source for Analysis now supports external Tomcat configuration.
AppScan® Source now supports the combination of node-locked and floating licenses.
Use the AppScan® Source command line interface (CLI) to configure application servers and external JDK.
AppScan® Source for Development (Eclipse Plug-in) supports Eclipse IDE 2024-06 to 2025-03.
AppScan® Source supports Red Hat Enterprise Linux versions 8.10 and 9.5
Language accuracy improvements

Fixes and security updates are listed here.

On Windows installations, the expand icon is not working on the How to fix page of the AppScan® Source Eclipse plugin.
To workaround this issue, add the following to the eclipse.ini file under -vmargs:
```
-Dorg.eclipse.swt.browser.DefaultType=edge
```

Support for SolidDB/Oracle will be removed in a future version of AppScan® Source. Please make plans now to migrate to data from SolidDB/Oracle toAppScan® Enterprise Server, whether manually or through the database migration utility.

February, 2025

HCL® AppScan® Source version 10.8.0 is the sixteenth fix pack release since the release of HCL® AppScan® Source major version 10.0.0.

IMPORTANT: My HCLSoftware portal has replaced the HCLSoftware Download and License Management Portal
- AppScan® Source versions 10.8.0 and later can be downloaded through the My HCLSoftware portal (MHS) only.
- AppScan® Source has added support for licensing through the My HCLSoftware portal (MHS).
  All entitlements have been migrated to MHS. Download or configure your license from MHS before upgrading.
  Create new deployments in MHS, then assign and activate your license for AppScan® Source. Devices and products that were activated through FNO are no longer valid and will not work.
  Note: Only the licensing management platform is changed; there are no changes to the license metrics or any additional charges for your licenses migrated to MHS.
  For more information about licensing using MHS, see Activating the software.
AppScan® Source supports HTML scanning.
AppScan® Source supports the Django framework for Python project scanning.
AppScan® Source supports .NET 9 scanning.
AppScan® Source supports the 2024 CWE Top 25 Most Dangerous Software Weaknesses report.
Users can now view properties for all project folders in the Properties view.
Language accuracy improvements.

Fixes and security updates are listed here.

AppScan® Source versions 10.6.0 and earlier will reach end-of-support (EOS) by June, 2025. Upgrade to version 10.7.0 or later before June, 2025, to maintain a supported version of AppScan® Source.
AppScan® Source no longer supports IBM MobileFirst Platform Application scanning.

HCL® AppScan® Source version 10.7.0 is the fifteenth fix pack release since the release of HCL® AppScan® Source major version 10.0.0.

Download AppScan® Source from the HCLSoftware Download and License Management Portal or My HCLSoftware (MHS). In future releases, the new My HCLSoftware portal replaces the HCLSoftware Download and License Management Portal.
AppScan® Source Findings view and reports have a new column for additional CWEs associated with the primary CWE.
AppScan® Source supports Red Hat Enterprise Linux versions 9.0 and 9.4.
AppScan® Source supports ESQL.
AppScan® Source support scanning PowerShell (.ps1) files within Infrastructure-as-Code projects.
AppScan® Source supports Java 21.
Updates to rules for Angular, ASP, CSS, Dart, Java source code scanner, JavaScript, JQuery, Objective-C, PHP, Python, secrets scanner, TerraForm, TypeScript, and VueJS.
AppScan® Source Data Access API classpath updated.

Fixes and security updates are listed here.

HCLSoftware products are undergoing changes in license acquisition and management. For more information, see Licensing Changes Announcement.

AppScan® Source versions 10.6.0 and earlier will reach end-of-support (EOS) by June, 2025.