Cross site scripting

2017-03-2722:59:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

19.1%

JSON

IBM TRIRIGA 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1996200.

CPENameOperatorVersion
tririga_application_platformeq3.4.1.2
tririga_application_platformeq3.3.2.5
tririga_application_platformeq3.3.2.4
tririga_application_platformeq3.3.2.0
tririga_application_platformeq3.4.0.0
tririga_application_platformeq3.3.1.0
tririga_application_platformeq3.3.0.0
tririga_application_platformeq3.3.1.3
tririga_application_platformeq3.3.2.2
tririga_application_platformeq3.4.2.2

Name	Operator	Version
tririga_application_platform	eq	3.4.1.2
tririga_application_platform	eq	3.3.2.5
tririga_application_platform	eq	3.3.2.4
tririga_application_platform	eq	3.3.2.0
tririga_application_platform	eq	3.4.0.0
tririga_application_platform	eq	3.3.1.0
tririga_application_platform	eq	3.3.0.0
tririga_application_platform	eq	3.3.1.3
tririga_application_platform	eq	3.3.2.2
tririga_application_platform	eq	3.4.2.2