CVE-2014-0843

CVE-2014-0843 affects IBM Rational Focal Point 6.x (specifically 6.4.x and 6.5.x before 6.5.2.3; 6.6.x before 6.6.1). The vulnerability is an XSS via remote authenticated users who upload a file, leveraging insufficient input validation and file-upload handling to inject arbitrary web script/HTML...