{"id":"CVE-2014-0843","aliases":["EUVD-2014-0873","GHSA-wc83-j7mg-m426"],"status":"published","title":"Cross-site scripting (XSS) vulnerability in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2...","description":"Cross-site scripting (XSS) vulnerability in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allows remote authenticated users to inject arbitrary web script or HTML by uploading a file.","severity":{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01088,"percentile":0.65562,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2014-02-25T21:00:00Z","modified":"2026-06-17T00:03:43Z","products":[{"vendor":"ibm","product":"rational_focal_point"}],"references":[{"url":"http://www.securityfocus.com/bid/65730","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21665005","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/90714","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0843"},{"url":"https://github.com/advisories/GHSA-wc83-j7mg-m426"}],"sources":{"cve":[{"id":"CVE-2014-0843","description":"Cross-site scripting (XSS) vulnerability in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allows remote authenticated users to inject arbitrary web script or HTML by uploading a file.","status":"published","published":"2014-02-25T21:00:00Z","modified":"2024-08-06T09:27:20.356Z","updated_at":"2026-11-02T14:33:47.330011Z"}],"euvd":[{"id":"EUVD-2014-0873","description":"Cross-site scripting (XSS) vulnerability in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allows remote authenticated users to inject arbitrary web script or HTML by uploading a file.","status":"published","published":"2014-02-25T21:00:00Z","modified":"2024-08-06T09:27:20Z","updated_at":"2026-11-03T01:57:19.658265Z"}],"ghsa":[{"id":"GHSA-wc83-j7mg-m426","title":"Cross-site scripting (XSS) vulnerability in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2...","description":"Cross-site scripting (XSS) vulnerability in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allows remote authenticated users to inject arbitrary web script or HTML by uploading a file.","status":"published","published":"2022-05-17T01:28:24Z","modified":"2023-02-03T05:04:14Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:53:30.880998Z"}],"nvd":[{"id":"CVE-2014-0843","description":"Cross-site scripting (XSS) vulnerability in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allows remote authenticated users to inject arbitrary web script or HTML by uploading a file.","status":"published","published":"2014-02-26T01:29:36.78Z","modified":"2026-06-17T00:03:43.4Z","cvss":[{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:02:53.330367Z"}]}}