CVE-2013-5398

Unspecified vulnerability in the Webservice Axis Gateway in IBM Rational Focal Point 6.4 before devfix1, 6.4.1.3 before devfix1, 6.5.1 before devfix1, 6.5.2 before devfix4, 6.5.2.3 before devfix9, 6.6 before devfix5, 6.6.0.1 before devfix2, and 6.6.1 allows remote attackers to bypass intended...

Security feature bypass

Unspecified vulnerability in the Webservice Axis Gateway in IBM Rational Focal Point 6.4 before devfix1, 6.4.1.3 before devfix1, 6.5.1 before devfix1, 6.5.2 before devfix4, 6.5.2.3 before devfix9, 6.6 before devfix5, 6.6.0.1 before devfix2, and 6.6.1 allows remote attackers to bypass intended...

Security feature bypass

Unspecified vulnerability in the Webservice Axis Gateway in IBM Rational Focal Point 6.4 before devfix1, 6.4.1.3 before devfix1, 6.5.1 before devfix1, 6.5.2 before devfix4, 6.5.2.3 before devfix9, 6.6 before devfix5, 6.6.0.1 before devfix2, and 6.6.1 allows remote attackers to bypass intended...

CVE-2013-5397

Unspecified vulnerability in the Webservice Axis Gateway in IBM Rational Focal Point 6.4 before devfix1, 6.4.1.3 before devfix1, 6.5.1 before devfix1, 6.5.2 before devfix4, 6.5.2.3 before devfix9, 6.6 before devfix5, 6.6.0.1 before devfix2, and 6.6.1 allows remote attackers to bypass intended...

CVE-2013-5398

CVE-2013-5398 is an information-disclosure vulnerability in IBM Rational Focal Point’s Webservice Axis Gateway. It arises from input validation of the file variable in the RequestAccessController servlet, enabling a remote, unauthenticated attacker to read configuration files of the Webservice Ax...

CVE-2013-5398

Unspecified vulnerability in the Webservice Axis Gateway in IBM Rational Focal Point 6.4 before devfix1, 6.4.1.3 before devfix1, 6.5.1 before devfix1, 6.5.2 before devfix4, 6.5.2.3 before devfix9, 6.6 before devfix5, 6.6.0.1 before devfix2, and 6.6.1 allows remote attackers to bypass intended...

CVE-2013-5397

CVE-2013-5397 covers an information-disclosure vulnerability in IBM Rational Focal Point’s Webservice Axis Gateway. The issue affects multiple versions (6.4 to 6.6.x with various devfix exclusions) and is described as allowing remote attackers to bypass access restrictions and obtain sensitive in...

CVE-2013-3025

Multiple cross-site scripting XSS vulnerabilities in IBM Rational Focal Point 6.5.x and 6.6.x before 6.6.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IBM Rational Focal Point 6.5.x and 6.6.x before 6.6.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-3025

Multiple cross-site scripting XSS vulnerabilities in IBM Rational Focal Point 6.5.x and 6.6.x before 6.6.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-3025

CVE-2013-3025 affects IBM Rational Focal Point 6.5.x and 6.6.x prior to 6.6.0.1, with multiple reflected XSS vulnerabilities that allow remote attackers to inject arbitrary scripts via unspecified vectors. The issue is described across NVD and related records; the underlying impact is partial int...

EmbeddedWB Web Browser ActiveX Control - Remote Code Execution

EmbeddedWB Web Browser ActiveX Control - Remote Code Execution source: https://www.securityfocus.com/bid/22755/info EmbeddedWB Web Browser ActiveX control is prone to a remote code-execution vulnerability. Exploiting this issue allows remote attackers to execute arbitrary machine code in the...