CVE-2017-1374

IBM TRIRIGA Application Platform is affected by CVE-2017-1374 through information disclosure across multiple 3.x releases. Affected versions include 3.3.0–3.3.2.x, 3.4.0–3.4.2.x, and 3.5.0–3.5.2.x. The vulnerability allows sensitive data exposure potentially leading to unauthorized access. Remedi...

CVE-2017-1373

Reports executed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute a report they do not have access to. IBM X-Force ID: 126866...

CVE-2017-1372

CVE-2017-1372 affects IBM TRIRIGA Application Platform 3.3.0–3.5.2.x. The issue is a cross-site scripting vulnerability in the Web UI caused by insufficient input filtering, allowing an attacker to embed arbitrary JavaScript and potentially disclose credentials in a trusted session. IBM remediati...

CVE-2017-1371

CVE-2017-1371 affects the IBM TRIRIGA Application Platform, with privilege-escalation in the Administrator/Builder tools. The IBM Security Bulletin identifies affected versions: 3.3.0–3.3.2.5, 3.4.0–3.4.2.5, and 3.5.0–3.5.2.2; a fix is available in the patches 3.3.2.6, 3.4.2.6, and 3.5.2.3. The C...

CVE-2017-1372: Improper Neutralization of Input During Web Page Generation

IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...

CVE-2017-1371: Undefined Security Weakness

Builder tools running in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute Builder tool actions they do not have access to. IBM X-Force ID: 126864...

PT-2017-13051

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 3.3 through 3.5 Description The issue allows an authenticated user to execute a report they do not have access to. Recommendations For versions 3.3 through 3.5, update to a version that includes the fi...

CVE-2017-1373: Undefined Security Weakness

Reports executed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute a report they do not have access to. IBM X-Force ID: 126866...

CVE-2017-1374: Exposure of Sensitive Information to an Unauthorized Actor

Sensitive data can be exposed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 that can lead to an attacker gaining unauthorized access to the system. IBM X-Force ID: 126867...

Moderate: Red Hat Security Advisory: jboss-ec2-eap security, bug fix, and enhancement update

An update for jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

IBM TRIRIGA Application Platform Remote Elevation of Privilege Vulnerability

The IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. The platform provides a set of design-time and run-time components for building and running its enterprise applications, respectively, and supports...

CVE-2017-1171

The IBM TRIRIGA Application Platform 3.3, 3,4, and 3,5 contain a vulnerability that could allow an authenticated user to execute Application actions they do not have access to. IBM Reference : 2001083...

CVE-2017-1171

The IBM TRIRIGA Application Platform 3.3, 3,4, and 3,5 contain a vulnerability that could allow an authenticated user to execute Application actions they do not have access to. IBM Reference : 2001083...

CVE-2017-1171

The IBM TRIRIGA Application Platform vulnerability CVE-2017-1171 allows an authenticated user to execute Application actions they do not have access to. Affected versions are 3.3.0–3.3.2.5, 3.4.0–3.4.2.5, and 3.5.0–3.5.2.0. Remediation: apply fixes in IBM TRIRIGA Platform 3.3.2.6, 3.4.2.6, or 3.5...

CVE-2017-1171: Undefined Security Weakness

The IBM TRIRIGA Application Platform 3.3, 3,4, and 3,5 contain a vulnerability that could allow an authenticated user to execute Application actions they do not have access to. IBM Reference : 2001083...

Red Hat JBoss Enterprise Application Platform Local Privilege Vulnerability

Red Hat JBoss Enterprise Application Platform EAP is the United States Red Hat Red Hat company's set of open source, J2EE-based middleware platform. The platform is mainly used to build, deploy and host Java applications and services. There is a local exploit vulnerability in Red Hat JBoss EAP. A...

Red Hat JBoss Enterprise Application Platform Local Elevation of Privilege Vulnerability

Red Hat JBoss Enterprise Application Platform EAP is the United States Red Hat Red Hat company's set of open source, J2EE-based middleware platform. The platform is mainly used to build, deploy and host Java applications and services. A local elevation of privilege vulnerability exists in Red Hat...

CVE-2016-5980

IBM TRIRIGA Application Platform is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

Cross site scripting

IBM TRIRIGA Application Platform is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-5980

CVE-2016-5980 affects IBM TRIRIGA Application Platform. The IBM bulletin documents a Reflected Cross-Site Scripting (XSS) vulnerability in the Web UI that can allow an attacker to inject arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Affected version...