Lucene search

[email protected]CVE-2014-0853

HistoryFeb 26, 2014 - 1:29 a.m.

CVE-2014-0853

2014-02-2601:29:36

CWE-79

[email protected]

web.nvd.nist.gov

ibm

rational focal point

xss

vulnerabilities

forward controller

attribute editor

ibm rational focal point 6.4.x

ibm rational focal point 6.5.x

nvd

cve-2014-0853

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the (1) ForwardController and (2) AttributeEditor scripts in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD

Node

ibmrational_focal_pointMatch6.4

ibmrational_focal_pointMatch6.4.0.1

ibmrational_focal_pointMatch6.4.1.0

ibmrational_focal_pointMatch6.4.1.1

ibmrational_focal_pointMatch6.4.1.2

ibmrational_focal_pointMatch6.4.1.3

ibmrational_focal_pointMatch6.5

ibmrational_focal_pointMatch6.5.0.1

ibmrational_focal_pointMatch6.5.0.2

ibmrational_focal_pointMatch6.5.1

ibmrational_focal_pointMatch6.5.1.1

ibmrational_focal_pointMatch6.5.2

ibmrational_focal_pointMatch6.5.2.1

ibmrational_focal_pointMatch6.5.2.2

ibmrational_focal_pointMatch6.5.2.3

ibmrational_focal_pointMatch6.6

ibmrational_focal_pointMatch6.6.0.1

CPENameOperatorVersion
ibm:rational_focal_pointibm rational focal pointeq6.4
ibm:rational_focal_pointibm rational focal pointeq6.4.0.1
ibm:rational_focal_pointibm rational focal pointeq6.4.1.0
ibm:rational_focal_pointibm rational focal pointeq6.4.1.1
ibm:rational_focal_pointibm rational focal pointeq6.4.1.2
ibm:rational_focal_pointibm rational focal pointeq6.4.1.3
ibm:rational_focal_pointibm rational focal pointeq6.5
ibm:rational_focal_pointibm rational focal pointeq6.5.0.1
ibm:rational_focal_pointibm rational focal pointeq6.5.0.2
ibm:rational_focal_pointibm rational focal pointeq6.5.1

CPE	Name	Operator	Version
ibm:rational_focal_point	ibm rational focal point	eq	6.4
ibm:rational_focal_point	ibm rational focal point	eq	6.4.0.1
ibm:rational_focal_point	ibm rational focal point	eq	6.4.1.0
ibm:rational_focal_point	ibm rational focal point	eq	6.4.1.1
ibm:rational_focal_point	ibm rational focal point	eq	6.4.1.2
ibm:rational_focal_point	ibm rational focal point	eq	6.4.1.3
ibm:rational_focal_point	ibm rational focal point	eq	6.5
ibm:rational_focal_point	ibm rational focal point	eq	6.5.0.1
ibm:rational_focal_point	ibm rational focal point	eq	6.5.0.2
ibm:rational_focal_point	ibm rational focal point	eq	6.5.1

Rows per page:

1-10 of 171

References

www-01.ibm.com/support/docview.wss?uid=swg21665005

www.securityfocus.com/bid/65726

exchange.xforce.ibmcloud.com/vulnerabilities/90754

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.4%

JSON

Related for CVE-2014-0853

cvelist1 nvd1 prion1 seebug1