Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

rational focal point vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2014-0839
IBM Rational Focal Point 6.4.x and 6.5.x prior to 6.5.2.3 and 6.6.x prior to 6.6.1 allows remote authenticated users to modify data via vectors involving a direct object reference.
Ibm Rational Focal Point 6.4.0.1Ibm Rational Focal Point 6.4.1.0Ibm Rational Focal Point 6.4.1.3Ibm Rational Focal Point 6.5.1Ibm Rational Focal Point 6.5.0.2Ibm Rational Focal Point 6.5.1.1Ibm Rational Focal Point 6.4Ibm Rational Focal Point 6.6Ibm Rational Focal Point 6.6.0.1Ibm Rational Focal Point 6.5Ibm Rational Focal Point 6.5.0.1Ibm Rational Focal Point 6.5.2.2Ibm Rational Focal Point 6.5.2.3Ibm Rational Focal Point 6.4.1.1Ibm Rational Focal Point 6.4.1.2Ibm Rational Focal Point 6.5.2Ibm Rational Focal Point 6.5.2.1
NA
CVE-2014-0842
The account-creation functionality in IBM Rational Focal Point 6.4.x and 6.5.x prior to 6.5.2.3 and 6.6.x prior to 6.6.1 places the new user's default password within the creation page, which allows remote malicious users to obtain sensitive information by reading the HTML s...
Ibm Rational Focal Point 6.4.0.1Ibm Rational Focal Point 6.5.1.1Ibm Rational Focal Point 6.4Ibm Rational Focal Point 6.6.0.1Ibm Rational Focal Point 6.5.0.1Ibm Rational Focal Point 6.5.0.2Ibm Rational Focal Point 6.5.2.3Ibm Rational Focal Point 6.6Ibm Rational Focal Point 6.4.1.2Ibm Rational Focal Point 6.5Ibm Rational Focal Point 6.5.2Ibm Rational Focal Point 6.5.2.1Ibm Rational Focal Point 6.5.2.2Ibm Rational Focal Point 6.4.1.0Ibm Rational Focal Point 6.4.1.1Ibm Rational Focal Point 6.4.1.3Ibm Rational Focal Point 6.5.1
NA
CVE-2014-0853
Multiple cross-site scripting (XSS) vulnerabilities in the (1) ForwardController and (2) AttributeEditor scripts in IBM Rational Focal Point 6.4.x and 6.5.x prior to 6.5.2.3 and 6.6.x prior to 6.6.1 allow remote authenticated users to inject arbitrary web script or HTML via unspe...
Ibm Rational Focal Point 6.4.0.1Ibm Rational Focal Point 6.4.1.0Ibm Rational Focal Point 6.4Ibm Rational Focal Point 6.4.1.3Ibm Rational Focal Point 6.4.1.1Ibm Rational Focal Point 6.4.1.2Ibm Rational Focal Point 6.5.1Ibm Rational Focal Point 6.5.2Ibm Rational Focal Point 6.5.2.1Ibm Rational Focal Point 6.5Ibm Rational Focal Point 6.5.0.1Ibm Rational Focal Point 6.5.2.2Ibm Rational Focal Point 6.5.2.3Ibm Rational Focal Point 6.5.0.2Ibm Rational Focal Point 6.5.1.1Ibm Rational Focal Point 6.6Ibm Rational Focal Point 6.6.0.1
NA
CVE-2014-0840
Multiple cross-site scripting (XSS) vulnerabilities in IBM Rational Focal Point 6.4.x and 6.5.x prior to 6.5.2.3 and 6.6.x prior to 6.6.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Ibm Rational Focal Point 6.4.0.1Ibm Rational Focal Point 6.4.1.0Ibm Rational Focal Point 6.4Ibm Rational Focal Point 6.4.1.3Ibm Rational Focal Point 6.6.0.1Ibm Rational Focal Point 6.5.0.2Ibm Rational Focal Point 6.5.1.1Ibm Rational Focal Point 6.5.2.3Ibm Rational Focal Point 6.6Ibm Rational Focal Point 6.5Ibm Rational Focal Point 6.5.0.1Ibm Rational Focal Point 6.5.2.1Ibm Rational Focal Point 6.5.2.2Ibm Rational Focal Point 6.4.1.1Ibm Rational Focal Point 6.4.1.2Ibm Rational Focal Point 6.5.1Ibm Rational Focal Point 6.5.2
NA
CVE-2014-0843
Cross-site scripting (XSS) vulnerability in IBM Rational Focal Point 6.4.x and 6.5.x prior to 6.5.2.3 and 6.6.x prior to 6.6.1 allows remote authenticated users to inject arbitrary web script or HTML by uploading a file.
Ibm Rational Focal Point 6.5.0.2Ibm Rational Focal Point 6.5.1.1Ibm Rational Focal Point 6.4Ibm Rational Focal Point 6.6Ibm Rational Focal Point 6.6.0.1Ibm Rational Focal Point 6.5Ibm Rational Focal Point 6.5.0.1Ibm Rational Focal Point 6.5.2.2Ibm Rational Focal Point 6.5.2.3Ibm Rational Focal Point 6.4.1.1Ibm Rational Focal Point 6.4.1.2Ibm Rational Focal Point 6.5.2Ibm Rational Focal Point 6.5.2.1Ibm Rational Focal Point 6.4.0.1Ibm Rational Focal Point 6.4.1.0Ibm Rational Focal Point 6.4.1.3Ibm Rational Focal Point 6.5.1
NA
CVE-2013-5398
Unspecified vulnerability in the Webservice Axis Gateway in IBM Rational Focal Point 6.4 before devfix1, 6.4.1.3 before devfix1, 6.5.1 before devfix1, 6.5.2 before devfix4, 6.5.2.3 before devfix9, 6.6 before devfix5, 6.6.0.1 before devfix2, and 6.6.1 allows remote malicious users...
Ibm Rational Focal Point 6.5.2Ibm Rational Focal Point 6.5.2.3Ibm Rational Focal Point 6.6Ibm Rational Focal Point 6.4Ibm Rational Focal Point 6.6.0.1Ibm Rational Focal Point 6.6.1Ibm Rational Focal Point 6.4.1.3Ibm Rational Focal Point 6.5.1
NA
CVE-2013-5397
Unspecified vulnerability in the Webservice Axis Gateway in IBM Rational Focal Point 6.4 before devfix1, 6.4.1.3 before devfix1, 6.5.1 before devfix1, 6.5.2 before devfix4, 6.5.2.3 before devfix9, 6.6 before devfix5, 6.6.0.1 before devfix2, and 6.6.1 allows remote malicious users...
Ibm Rational Focal Point 6.5.2.3Ibm Rational Focal Point 6.6Ibm Rational Focal Point 6.4Ibm Rational Focal Point 6.4.1.3Ibm Rational Focal Point 6.6.0.1Ibm Rational Focal Point 6.6.1Ibm Rational Focal Point 6.5.1Ibm Rational Focal Point 6.5.2
NA
CVE-2013-3025
Multiple cross-site scripting (XSS) vulnerabilities in IBM Rational Focal Point 6.5.x and 6.6.x prior to 6.6.0.1 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Ibm Rational Focal Point 6.5.2Ibm Rational Focal Point 6.5.2.1Ibm Rational Focal Point 6.5.2.2Ibm Rational Focal Point 6.5.2.3Ibm Rational Focal Point 6.6
5.3
CVSSv3
CVE-2014-0841
IBM Rational Focal Point 6.4.0, 6.4.1, 6.5.1, 6.5.2, and 6.6.0 use a weak algorithm to hash passwords, which makes it easier for context-dependent malicious users to obtain cleartext values via a brute-force attack. IBM X-Force ID: 90704.
Ibm Rational Focal Point 6.5.1Ibm Rational Focal Point 6.6Ibm Rational Focal Point 6.4Ibm Rational Focal Point 6.4.1Ibm Rational Focal Point 6.5.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-2907hardcodedinjectCVE-2024-20359CVE-2024-2467CVE-2024-4077CVE-2024-22391cameraCVE-2024-20353
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook