Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:rational_focal_point:6.4:*:*:*:*:*:*:*

part: a version: 6.4 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductRational Focal Point (51a0188a-e815-5213-a6ff-02c0ad1e686a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0853 vulnerable 2026-06-08 05:05:14.731232 Details available
Multiple cross-site scripting (XSS) vulnerabilities in the (1) ForwardController and (2) AttributeEditor scripts in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2014-02-25T21:00:00.000Z
Updated: 2024-08-06T09:27:20.190Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0843 vulnerable 2026-06-08 05:05:14.696218 Details available
Cross-site scripting (XSS) vulnerability in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allows remote authenticated users to inject arbitrary web script or HTML by uploading a file.
Published: 2014-02-25T21:00:00.000Z
Updated: 2024-08-06T09:27:20.356Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0842 vulnerable 2026-06-08 05:05:14.695536 Details available
The account-creation functionality in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 places the new user's default password within the creation page, which allows remote attackers to obtain sensitive information by reading the HTML source code.
Published: 2014-02-25T21:00:00.000Z
Updated: 2024-08-06T09:27:20.269Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0841 vulnerable 2026-06-08 05:05:14.692164 Details available
IBM Rational Focal Point 6.4.0, 6.4.1, 6.5.1, 6.5.2, and 6.6.0 use a weak algorithm to hash passwords, which makes it easier for context-dependent attackers to obtain cleartext values via a brute-force attack. IBM X-Force ID: 90704.
Published: 2018-04-27T16:00:00.000Z
Updated: 2024-08-06T09:27:20.191Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0840 vulnerable 2026-06-08 05:05:14.691541 Details available
Multiple cross-site scripting (XSS) vulnerabilities in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2014-02-25T21:00:00.000Z
Updated: 2024-08-06T09:27:20.251Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0839 vulnerable 2026-06-08 05:05:14.682358 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5398 vulnerable 2026-06-08 05:04:51.503702 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5397 vulnerable 2026-06-08 05:04:51.499726 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.