IBM TRIRIGA Application Platform Cross-Site Scripting Vulnerability (CNVD-2016-05021)

IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. A cross-site scripting vulnerability exists in IBM TRIRIGA Application Platform, which can be exploited by an attacker to inject arbitrary Web script or HTML...

CVE-2016-0387

Cross-site scripting XSS vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-2883...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to hijack the authentication of administrators for requests that delete employees...

Design/Logic Flaw

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to obtain sensitive information by reading HTTP responses...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-0387...

CVE-2016-2883

IBM TRIRIGA Application Platform is affected by CVE-2016-2883, a cross-site scripting (XSS) vulnerability caused by improper validation of user-supplied input. A remote authenticated attacker can execute script or HTML in a victim’s browser via a specially crafted URL. Affected versions are: 3.3 ...

CVE-2016-2882

CVE-2016-2882 affects IBM TRIRIGA Application Platform 3.3 (pre-3.3.2.6), 3.4 (pre-3.4.2.4), and 3.5 (pre-3.5.0.2). The vulnerability allows remote authenticated users to obtain sensitive information by reading HTTP responses. The IBM Security Bulletin confirms affected versions and provides fixe...

CVE-2016-0387

Summary: CVE-2016-0387 is an IBM TRIRIGA Application Platform XSS vulnerability. The issue arises from improper validation of user-supplied input, allowing remote, authenticated users to execute arbitrary script via a crafted URL. Affected versions are 3.3 (before 3.3.2.6), 3.4 (before 3.4.2.4), ...

CVE-2016-0374

The builder tools in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allow remote authenticated users to gain privileges for application modification via unspecified vectors...

Code injection

The builder tools in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allow remote authenticated users to gain privileges for application modification via unspecified vectors...

CVE-2016-0374

Summary (CVE-2016-0374): IBM TRIRIGA Application Platform builder tools (versions 3.3 before 3.3.2.6; 3.4 before 3.4.2.4; 3.5 before 3.5.0.2) are affected. A security issue allows remote authenticated users to gain privileges for application modification via unspecified vectors. IBM’s bulletin id...

CVE-2016-0362

Vulnerability (CVE-2016-0362) affects IBM TRIRIGA Application Platform versions 3.3.x before 3.3.2.6, 3.4.x before 3.4.2.4, and 3.5.x before 3.5.0.2. The issue is a server-side request forgery (SSRF) via a crafted proxy request to a web service, allowing remote authenticated users to trigger netw...

Red Hat JBoss Enterprise Application Platform Security Bypass Vulnerability

Red Hat JBoss Enterprise Application Platform EAP is the United States Red Hat Red Hat company's set of open source, J2EE-based middleware platform. A security bypass vulnerability exists in Red Hat JBoss EAP version 5, which can be exploited by an attacker to bypass security restrictions and cau...

Critical: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.0 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

IBM TRIRIGA Application Platform Information Disclosure Vulnerability (CNVD-2016-04039)

The IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. The platform provides a set of design-time and run-time components for building and running its enterprise applications, respectively, and supports...

Safety warning: JBoss application platform, the back door leads to about 3 2 0 million Server threats with detection and the use of tools-vulnerability warning-the black bar safety net

The cause of the incident is that the recent ransomware event a large number of diffusion caused by Cisco security researchers noted that, after its security researchers survey analysis found that, among a large number of cases because the attacker uses the JBoss Java application platform...

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.7 update

An update is now available for Red Hat JBoss Enterprise Application Platform from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

VulnCheck KEV: CVE-2015-5188

Cross-site request forgery CSRF vulnerability in the Web Console web-console in Red Hat Enterprise Application Platform before 6.4.4 and WildFly formerly JBoss Application Server before 2.0.0.CR9 allows remote attackers to hijack the authentication of administrators for requests that make arbitra...

RHEL 6 : jboss-ec2-eap (RHSA-2016:0124)

Updated jboss-ec2-eap packages that add one enhancement and resolve one security issue are now available for Red Hat JBoss Enterprise Application Platform 6.4.6 on Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerabilit...

VulnCheck KEV: CVE-2015-7501

Red Hat JBoss A-MQ 6.x; BPM Suite BPMS 6.x; BRMS 6.x and 5.x; Data Grid JDG 6.x; Data Virtualization JDV 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works FSW 6.x; Operations Network JBoss ON 3.x; Portal 6.x; SOA Platform SOA-P 5.x; Web Server JWS 3.x;...