CVE-2016-0344

CVE-2016-0344 is an XSS vulnerability in IBM TRIRIGA Application Platform (My Reports) affecting versions 3.3 prior to 3.3.2.6, 3.4 prior to 3.4.2.3, and 3.5 prior to 3.5.0.1. The root cause is an XSS flaw in the My Reports component that allows remote injection of script/HTML via unspecified vec...

CVE-2016-0343

IBM TRIRIGA Application Platform Information Disclosure (CVE-2016-0343) affects versions 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1. An authenticated user can obtain sensitive information by reading error messages, due to disclosure in error output. The remediation is to apply...

CVE-2016-0345

IBM TRIRIGA Application Platform 3.3/3.4/3.5 are affected by CVE-2016-0345, which allows remote authenticated users to disclose the installation path through Birt report rendering. Root cause is information disclosure via Birt report rendering paths. Remediations are to upgrade to fixed fix packs...

CVE-2016-0343: Exposure of Sensitive Information to an Unauthorized Actor

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to obtain sensitive information by reading an error message. IBM X-Force ID: 111784...

CVE-2016-0348: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in IBM TRIRIGA Application Platform 3.3, 3.3.1, 3.3.2, and 3.4 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. IBM X-Force ID: 111813...

CVE-2016-0344: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the My Reports component in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 111785...

CVE-2016-0345: Exposure of Sensitive Information to an Unauthorized Actor

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to obtain the installation path via vectors involving Birt report rendering. IBM X-Force ID: 111786...

RHEL 7 : Red Hat JBoss Enterprise Application Platform 6.4.19 (RHSA-2018:0268)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0268 advisory. Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red...

RHEL 6 : Red Hat JBoss Enterprise Application Platform 6.4.19 (RHSA-2018:0270)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0270 advisory. Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red...

RHEL 6 : jboss-ec2-eap (RHSA-2018:0275)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0275 advisory. The jboss-ec2-eap packages provide scripts for Red Hat JBoss Enterprise Application Platform running on the Amazon Web Services AWS Elastic...

Design/Logic Flaw

IBM TRIRIGA Application Platform before 3.3.2 allows remote attackers to obtain sensitive information via vectors related to granting unauthenticated access to Document Manager. IBM X-Force ID: 111486...

CVE-2016-0300

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 might allow remote attackers to access arbitrary JSP pages via vectors related to improper input validation. IBM X-Force ID: 111412...

Code injection

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to read or modify arbitrary reports by leveraging an incorrect grant of access. IBM X-Force ID: 111783...

CVE-2016-0300

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 might allow remote attackers to access arbitrary JSP pages via vectors related to improper input validation. IBM X-Force ID: 111412...

CVE-2016-0342

CVE-2016-0342 affects IBM TRIRIGA Application Platform 3.3 (before 3.3.2.6), 3.4 (before 3.4.2.3), and 3.5 (before 3.5.0.1). The root cause is an incorrect grant of access that allows remote authenticated users to read or modify reports they should not access. The IBM bulletin lists remediation v...

CVE-2016-0300

IBM TRIRIGA Application Platform is affected by CVE-2016-0300 due to improper input validation, enabling remote access to arbitrary JSP pages. Affected versions include 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1. Remediation: upgrade to fixed packs 3.3.2.6, 3.4.2.3, or 3.5.0.1...

CVE-2016-0312

CVE-2016-0312 affects IBM TRIRIGA Application Platform before 3.3.2. The issue allows remote attackers to obtain sensitive information via unauthenticated access to the Document Manager. No explicit exploit details or remediation are provided in the connected documents.

CVE-2016-0342: Improper Access Control

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to read or modify arbitrary reports by leveraging an incorrect grant of access. IBM X-Force ID: 111783...

CVE-2016-0312: Exposure of Sensitive Information to an Unauthorized Actor

IBM TRIRIGA Application Platform before 3.3.2 allows remote attackers to obtain sensitive information via vectors related to granting unauthenticated access to Document Manager. IBM X-Force ID: 111486...

CVE-2016-0300: Improper Input Validation

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 might allow remote attackers to access arbitrary JSP pages via vectors related to improper input validation. IBM X-Force ID: 111412...