CVE-2014-0846

no score yetEPSS 0.9%

Cross-site scripting (XSS) vulnerability in IBM Rational Requirements Composer 3.x before 3.0.1.6 iFix2 and 4.x before 4.0.6, and Rational DOORS Next Generation 4.x before 4.0.6, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2014-03-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:rational_doors_next_generation
ibm:rational_requirements_composer

References

http://www-01.ibm.com/support/docview.wss?uid=swg21664412
http://www.securityfocus.com/bid/65917
https://exchange.xforce.ibmcloud.com/vulnerabilities/90720
http://www-01.ibm.com/support/docview.wss?uid=swg21664412
http://www.securityfocus.com/bid/65917

Check your stack JSON