Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:rational_focal_point:6.5.1.1:*:*:*:*:*:*:*

part: a version: 6.5.1.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductRational Focal Point (51a0188a-e815-5213-a6ff-02c0ad1e686a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0853 vulnerable 2026-06-08 05:05:14.731410 Details available
Multiple cross-site scripting (XSS) vulnerabilities in the (1) ForwardController and (2) AttributeEditor scripts in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2014-02-25T21:00:00.000Z
Updated: 2024-08-06T09:27:20.190Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0843 vulnerable 2026-06-08 05:05:14.696401 Details available
Cross-site scripting (XSS) vulnerability in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allows remote authenticated users to inject arbitrary web script or HTML by uploading a file.
Published: 2014-02-25T21:00:00.000Z
Updated: 2024-08-06T09:27:20.356Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0842 vulnerable 2026-06-08 05:05:14.695728 Details available
The account-creation functionality in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 places the new user's default password within the creation page, which allows remote attackers to obtain sensitive information by reading the HTML source code.
Published: 2014-02-25T21:00:00.000Z
Updated: 2024-08-06T09:27:20.269Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0840 vulnerable 2026-06-08 05:05:14.691718 Details available
Multiple cross-site scripting (XSS) vulnerabilities in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2014-02-25T21:00:00.000Z
Updated: 2024-08-06T09:27:20.251Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0839 vulnerable 2026-06-08 05:05:14.687730 Details available
IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allows remote authenticated users to modify data via vectors involving a direct object reference.
Published: 2014-02-25T21:00:00.000Z
Updated: 2024-08-06T09:27:20.091Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.