Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:rational_focal_point:6.5.2:*:*:*:*:*:*:*

part: a version: 6.5.2 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductRational Focal Point (51a0188a-e815-5213-a6ff-02c0ad1e686a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0853 vulnerable 2026-06-08 05:05:14.731425 Details available
Multiple cross-site scripting (XSS) vulnerabilities in the (1) ForwardController and (2) AttributeEditor scripts in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2014-02-25T21:00:00.000Z
Updated: 2024-08-06T09:27:20.190Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0843 vulnerable 2026-06-08 05:05:14.696420 Details available
Cross-site scripting (XSS) vulnerability in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allows remote authenticated users to inject arbitrary web script or HTML by uploading a file.
Published: 2014-02-25T21:00:00.000Z
Updated: 2024-08-06T09:27:20.356Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0842 vulnerable 2026-06-08 05:05:14.695746 Details available
The account-creation functionality in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 places the new user's default password within the creation page, which allows remote attackers to obtain sensitive information by reading the HTML source code.
Published: 2014-02-25T21:00:00.000Z
Updated: 2024-08-06T09:27:20.269Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0841 vulnerable 2026-06-08 05:05:14.695062 Details available
IBM Rational Focal Point 6.4.0, 6.4.1, 6.5.1, 6.5.2, and 6.6.0 use a weak algorithm to hash passwords, which makes it easier for context-dependent attackers to obtain cleartext values via a brute-force attack. IBM X-Force ID: 90704.
Published: 2018-04-27T16:00:00.000Z
Updated: 2024-08-06T09:27:20.191Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0840 vulnerable 2026-06-08 05:05:14.691735 Details available
Multiple cross-site scripting (XSS) vulnerabilities in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2014-02-25T21:00:00.000Z
Updated: 2024-08-06T09:27:20.251Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0839 vulnerable 2026-06-08 05:05:14.688399 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5398 vulnerable 2026-06-08 05:04:51.503761 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5397 vulnerable 2026-06-08 05:04:51.501317 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3025 vulnerable 2026-06-08 05:04:29.879526 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.