CVE-2014-0846

Published: Mar 4, 2014Modified: Apr 29, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in IBM Rational Requirements Composer 3.x before 3.0.1.6 iFix2 and 4.x before 4.0.6, and Rational DOORS Next Generation 4.x before 4.0.6, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Affected (21)

Products: Ibm: Rational Doors Next Generation, Rational Requirements Composer

Ibm

2 products

Rational Doors Next Generation

Rational Requirements Composer

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Doors Next Generation	Version 4.0.0
Ibm Rational Doors Next Generation	Version 4.0.1
Ibm Rational Doors Next Generation	Version 4.0.2
Ibm Rational Doors Next Generation	Version 4.0.3
Ibm Rational Doors Next Generation	Version 4.0.4
Ibm Rational Doors Next Generation	Version 4.0.5

Configuration B

15 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Requirements Composer	Version 3.0.1.1
Ibm Rational Requirements Composer	Version 3.0.1.2
Ibm Rational Requirements Composer	Version 3.0.1.3
Ibm Rational Requirements Composer	Version 3.0.1.4
Ibm Rational Requirements Composer	Version 3.0.1.5
Ibm Rational Requirements Composer	Version 3.0.1.6
Ibm Rational Requirements Composer	Version 3.0.1
Ibm Rational Requirements Composer	Version 4.0.0.1
Ibm Rational Requirements Composer	Version 4.0.0.2
Ibm Rational Requirements Composer	Version 4.0.0
Ibm Rational Requirements Composer	Version 4.0.1
Ibm Rational Requirements Composer	Version 4.0.2
Ibm Rational Requirements Composer	Version 4.0.3
Ibm Rational Requirements Composer	Version 4.0.4
Ibm Rational Requirements Composer	Version 4.0.5