Lucene search
IbmCVE-2014-0853HistoryFeb 26, 2014 - 1:29 a.m.
CVE-2014-0853
2014-02-2601:29:36
CWE-79
ibm
web.nvd.nist.gov
19
ibm
rational focal point
xss
vulnerabilities
forward controller
attribute editor
ibm rational focal point 6.4.x
ibm rational focal point 6.5.x
nvd
cve-2014-0853
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.2
Confidence
High
EPSS
0.001
Percentile
35.4%
Multiple cross-site scripting (XSS) vulnerabilities in the (1) ForwardController and (2) AttributeEditor scripts in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
Node
ibmrational_focal_pointMatch6.4
ORibmrational_focal_pointMatch6.4.0.1
ORibmrational_focal_pointMatch6.4.1.0
ORibmrational_focal_pointMatch6.4.1.1
ORibmrational_focal_pointMatch6.4.1.2
ORibmrational_focal_pointMatch6.4.1.3
ORibmrational_focal_pointMatch6.5
ORibmrational_focal_pointMatch6.5.0.1
ORibmrational_focal_pointMatch6.5.0.2
ORibmrational_focal_pointMatch6.5.1
ORibmrational_focal_pointMatch6.5.1.1
ORibmrational_focal_pointMatch6.5.2
ORibmrational_focal_pointMatch6.5.2.1
ORibmrational_focal_pointMatch6.5.2.2
ORibmrational_focal_pointMatch6.5.2.3
ORibmrational_focal_pointMatch6.6
ORibmrational_focal_pointMatch6.6.0.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | rational_focal_point | 6.4 | cpe:2.3:a:ibm:rational_focal_point:6.4:*:*:*:*:*:*:* |
| ibm | rational_focal_point | 6.4.0.1 | cpe:2.3:a:ibm:rational_focal_point:6.4.0.1:*:*:*:*:*:*:* |
| ibm | rational_focal_point | 6.4.1.0 | cpe:2.3:a:ibm:rational_focal_point:6.4.1.0:*:*:*:*:*:*:* |
| ibm | rational_focal_point | 6.4.1.1 | cpe:2.3:a:ibm:rational_focal_point:6.4.1.1:*:*:*:*:*:*:* |
| ibm | rational_focal_point | 6.4.1.2 | cpe:2.3:a:ibm:rational_focal_point:6.4.1.2:*:*:*:*:*:*:* |
| ibm | rational_focal_point | 6.4.1.3 | cpe:2.3:a:ibm:rational_focal_point:6.4.1.3:*:*:*:*:*:*:* |
| ibm | rational_focal_point | 6.5 | cpe:2.3:a:ibm:rational_focal_point:6.5:*:*:*:*:*:*:* |
| ibm | rational_focal_point | 6.5.0.1 | cpe:2.3:a:ibm:rational_focal_point:6.5.0.1:*:*:*:*:*:*:* |
| ibm | rational_focal_point | 6.5.0.2 | cpe:2.3:a:ibm:rational_focal_point:6.5.0.2:*:*:*:*:*:*:* |
| ibm | rational_focal_point | 6.5.1 | cpe:2.3:a:ibm:rational_focal_point:6.5.1:*:*:*:*:*:*:* |
Related
prion
prion
Cross site scripting
2014-02-26 01:29:00
cvelist
cvelist
CVE-2014-0853
2014-02-25 21:00:00
nvd
nvd
CVE-2014-0853
2014-02-26 01:29:36
seebug
seebug
IBM Rational Focal Pointๆชๆๅคไธชๅฎๅ
จๆผๆด
2014-02-25 00:00:00
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.2
Confidence
High
EPSS
0.001
Percentile
35.4%
Related for CVE-2014-0853