CVE-2017-1372

CVE-2017-1372 affects IBM TRIRIGA Application Platform 3.3.0–3.5.2.x. The issue is a cross-site scripting vulnerability in the Web UI caused by insufficient input filtering, allowing an attacker to embed arbitrary JavaScript and potentially disclose credentials in a trusted session. IBM remediati...

CVE-2017-1372

IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...

CVE-2017-1373

Reports executed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute a report they do not have access to. IBM X-Force ID: 126866...

CVE-2017-1374

IBM TRIRIGA Application Platform is affected by CVE-2017-1374 through information disclosure across multiple 3.x releases. Affected versions include 3.3.0–3.3.2.x, 3.4.0–3.4.2.x, and 3.5.0–3.5.2.x. The vulnerability allows sensitive data exposure potentially leading to unauthorized access. Remedi...

CVE-2017-1371

CVE-2017-1371 affects the IBM TRIRIGA Application Platform, with privilege-escalation in the Administrator/Builder tools. The IBM Security Bulletin identifies affected versions: 3.3.0–3.3.2.5, 3.4.0–3.4.2.5, and 3.5.0–3.5.2.2; a fix is available in the patches 3.3.2.6, 3.4.2.6, and 3.5.2.3. The C...

Moderate: Red Hat Security Advisory: jboss-ec2-eap security, bug fix, and enhancement update

An update for jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

IBM TRIRIGA Application Platform Remote Elevation of Privilege Vulnerability

The IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. The platform provides a set of design-time and run-time components for building and running its enterprise applications, respectively, and supports...

CVE-2017-1171

The IBM TRIRIGA Application Platform 3.3, 3,4, and 3,5 contain a vulnerability that could allow an authenticated user to execute Application actions they do not have access to. IBM Reference : 2001083...

CVE-2017-1171

The IBM TRIRIGA Application Platform 3.3, 3,4, and 3,5 contain a vulnerability that could allow an authenticated user to execute Application actions they do not have access to. IBM Reference : 2001083...

CVE-2017-1171

The IBM TRIRIGA Application Platform vulnerability CVE-2017-1171 allows an authenticated user to execute Application actions they do not have access to. Affected versions are 3.3.0–3.3.2.5, 3.4.0–3.4.2.5, and 3.5.0–3.5.2.0. Remediation: apply fixes in IBM TRIRIGA Platform 3.3.2.6, 3.4.2.6, or 3.5...

Red Hat JBoss Enterprise Application Platform Local Privilege Vulnerability

Red Hat JBoss Enterprise Application Platform EAP is the United States Red Hat Red Hat company's set of open source, J2EE-based middleware platform. The platform is mainly used to build, deploy and host Java applications and services. There is a local exploit vulnerability in Red Hat JBoss EAP. A...

Red Hat JBoss Enterprise Application Platform Local Elevation of Privilege Vulnerability

Red Hat JBoss Enterprise Application Platform EAP is the United States Red Hat Red Hat company's set of open source, J2EE-based middleware platform. The platform is mainly used to build, deploy and host Java applications and services. A local elevation of privilege vulnerability exists in Red Hat...

CVE-2016-5980

IBM TRIRIGA Application Platform is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

Cross site scripting

IBM TRIRIGA Application Platform is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-5980

CVE-2016-5980 affects IBM TRIRIGA Application Platform. The IBM bulletin documents a Reflected Cross-Site Scripting (XSS) vulnerability in the Web UI that can allow an attacker to inject arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Affected version...

CVE-2016-6000

CVE-2016-6000 affects IBM TRIRIGA Application Platform with a Reflected Cross‑Site Scripting vulnerability in the Web UI. The issue allows embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Affected versions include IBM TRIRIGA Application Plat...

CVE-2016-8329

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Mobile Application Platform. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2016-8329

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Mobile Application Platform. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

Red Hat JBoss Enterprise Application Platform Remote Denial of Service Vulnerability (CNVD-2017-01088)

Red Hat JBoss Enterprise Application Platform EAP is the United States Red Hat Red Hat company's set of open source, J2EE-based middleware platform. The platform is mainly used to build, deploy and host Java applications and services. A remote denial of service vulnerability exists in Red Hat JBo...

Red Hat JBoss Enterprise Application Platform Remote Denial of Service Vulnerability

Red Hat JBoss Enterprise Application Platform EAP is the United States Red Hat Red Hat company's set of open source, J2EE-based middleware platform. The platform is mainly used to build, deploy and host Java applications and services. Red Hat JBoss Enterprise Application Platform is prone to a...