CVE-2014-0843

Description

Cross-site scripting (XSS) vulnerability in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allows remote authenticated users to inject arbitrary web script or HTML by uploading a file.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/90714

http://www.securityfocus.com/bid/65730

http://www-01.ibm.com/support/docview.wss?uid=swg21665005

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS