Lucene search
IbmCVE-2014-0843HistoryFeb 26, 2014 - 1:29 a.m.
CVE-2014-0843
2014-02-2601:29:36
CWE-79
ibm
web.nvd.nist.gov
25
cve-2014-0843
cross-site scripting
xss
ibm rational focal point
vulnerability
security
nvd
remote authenticated users
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.2
Confidence
High
EPSS
0.001
Percentile
33.4%
Cross-site scripting (XSS) vulnerability in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allows remote authenticated users to inject arbitrary web script or HTML by uploading a file.
Affected configurations
Node
ibmrational_focal_pointMatch6.4
ORibmrational_focal_pointMatch6.4.0.1
ORibmrational_focal_pointMatch6.4.1.0
ORibmrational_focal_pointMatch6.4.1.1
ORibmrational_focal_pointMatch6.4.1.2
ORibmrational_focal_pointMatch6.4.1.3
ORibmrational_focal_pointMatch6.5
ORibmrational_focal_pointMatch6.5.0.1
ORibmrational_focal_pointMatch6.5.0.2
ORibmrational_focal_pointMatch6.5.1
ORibmrational_focal_pointMatch6.5.1.1
ORibmrational_focal_pointMatch6.5.2
ORibmrational_focal_pointMatch6.5.2.1
ORibmrational_focal_pointMatch6.5.2.2
ORibmrational_focal_pointMatch6.5.2.3
ORibmrational_focal_pointMatch6.6
ORibmrational_focal_pointMatch6.6.0.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | rational_focal_point | 6.4 | cpe:2.3:a:ibm:rational_focal_point:6.4:*:*:*:*:*:*:* |
| ibm | rational_focal_point | 6.4.0.1 | cpe:2.3:a:ibm:rational_focal_point:6.4.0.1:*:*:*:*:*:*:* |
| ibm | rational_focal_point | 6.4.1.0 | cpe:2.3:a:ibm:rational_focal_point:6.4.1.0:*:*:*:*:*:*:* |
| ibm | rational_focal_point | 6.4.1.1 | cpe:2.3:a:ibm:rational_focal_point:6.4.1.1:*:*:*:*:*:*:* |
| ibm | rational_focal_point | 6.4.1.2 | cpe:2.3:a:ibm:rational_focal_point:6.4.1.2:*:*:*:*:*:*:* |
| ibm | rational_focal_point | 6.4.1.3 | cpe:2.3:a:ibm:rational_focal_point:6.4.1.3:*:*:*:*:*:*:* |
| ibm | rational_focal_point | 6.5 | cpe:2.3:a:ibm:rational_focal_point:6.5:*:*:*:*:*:*:* |
| ibm | rational_focal_point | 6.5.0.1 | cpe:2.3:a:ibm:rational_focal_point:6.5.0.1:*:*:*:*:*:*:* |
| ibm | rational_focal_point | 6.5.0.2 | cpe:2.3:a:ibm:rational_focal_point:6.5.0.2:*:*:*:*:*:*:* |
| ibm | rational_focal_point | 6.5.1 | cpe:2.3:a:ibm:rational_focal_point:6.5.1:*:*:*:*:*:*:* |
Related
prion
prion
Cross site scripting
2014-02-26 01:29:00
nvd
nvd
CVE-2014-0843
2014-02-26 01:29:36
cvelist
cvelist
CVE-2014-0843
2014-02-25 21:00:00
seebug
seebug
IBM Rational Focal Pointๆชๆๅคไธชๅฎๅ
จๆผๆด
2014-02-25 00:00:00
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.2
Confidence
High
EPSS
0.001
Percentile
33.4%
Related for CVE-2014-0843