Cross-Site Scripting Vulnerabilities in IBM Rational Focal Point Product
CVE-2014-0853

Currently unrated

Key Information:

Vendor

IBM
Status
Rational Focal Point
Vendor
CVE Published:
26 February 2014

What is CVE-2014-0853?

Multiple cross-site scripting (XSS) vulnerabilities exist in IBM Rational Focal Point, allowing remote authenticated users to inject arbitrary web script or HTML. These vulnerabilities are present in the ForwardController and AttributeEditor scripts, impacting various versions of the product before specific versions. Proper input validation and sanitation measures should be implemented to prevent such attacks.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21665005
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/90754
vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/65726
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.