CVE-2014-0843

2014-02-2521:00:00

ibm

www.cve.org

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.4%

JSON

Cross-site scripting (XSS) vulnerability in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allows remote authenticated users to inject arbitrary web script or HTML by uploading a file.

References

www-01.ibm.com/support/docview.wss?uid=swg21665005

www.securityfocus.com/bid/65730

exchange.xforce.ibmcloud.com/vulnerabilities/90714