Cross site scripting

2017-02-0120:59:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.9%

JSON

IBM TRIRIGA Application Platform is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

CPENameOperatorVersion
tririga_application_platformeq3.5.1.0
tririga_application_platformeq3.4.1.2
tririga_application_platformeq3.3.2.5
tririga_application_platformeq3.3.2.4
tririga_application_platformeq3.5.0.0
tririga_application_platformeq3.3.2.0
tririga_application_platformeq3.4.0.0
tririga_application_platformeq3.3.1.0
tririga_application_platformeq3.3.0.0
tririga_application_platformeq3.3.1.3

Name	Operator	Version
tririga_application_platform	eq	3.5.1.0
tririga_application_platform	eq	3.4.1.2
tririga_application_platform	eq	3.3.2.5
tririga_application_platform	eq	3.3.2.4
tririga_application_platform	eq	3.5.0.0
tririga_application_platform	eq	3.3.2.0
tririga_application_platform	eq	3.4.0.0
tririga_application_platform	eq	3.3.1.0
tririga_application_platform	eq	3.3.0.0
tririga_application_platform	eq	3.3.1.3