Cross site scripting

IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...

CVE-2017-1373

Reports executed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute a report they do not have access to. IBM X-Force ID: 126866...

CVE-2017-1372

CVE-2017-1372 affects IBM TRIRIGA Application Platform 3.3.0–3.5.2.x. The issue is a cross-site scripting vulnerability in the Web UI caused by insufficient input filtering, allowing an attacker to embed arbitrary JavaScript and potentially disclose credentials in a trusted session. IBM remediati...

CVE-2017-1371

CVE-2017-1371 affects the IBM TRIRIGA Application Platform, with privilege-escalation in the Administrator/Builder tools. The IBM Security Bulletin identifies affected versions: 3.3.0–3.3.2.5, 3.4.0–3.4.2.5, and 3.5.0–3.5.2.2; a fix is available in the patches 3.3.2.6, 3.4.2.6, and 3.5.2.3. The C...

CVE-2017-1372

IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...

CVE-2017-1374

IBM TRIRIGA Application Platform is affected by CVE-2017-1374 through information disclosure across multiple 3.x releases. Affected versions include 3.3.0–3.3.2.x, 3.4.0–3.4.2.x, and 3.5.0–3.5.2.x. The vulnerability allows sensitive data exposure potentially leading to unauthorized access. Remedi...

PT-2017-13040

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 3.3 through 3.5 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trust...

PT-2017-13036

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 3.3 through 3.5 Description The issue allows an authenticated user to execute actions they do not have access to. Recommendations For versions 3.3 through 3.5, update to a version that includes the fix...

CVE-2017-1373: Undefined Security Weakness

Reports executed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute a report they do not have access to. IBM X-Force ID: 126866...

PT-2017-13051

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 3.3 through 3.5 Description The issue allows an authenticated user to execute a report they do not have access to. Recommendations For versions 3.3 through 3.5, update to a version that includes the fi...

CVE-2017-1371: Undefined Security Weakness

Builder tools running in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute Builder tool actions they do not have access to. IBM X-Force ID: 126864...

CVE-2017-1372: Improper Neutralization of Input During Web Page Generation

IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...

CVE-2017-1374: Exposure of Sensitive Information to an Unauthorized Actor

Sensitive data can be exposed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 that can lead to an attacker gaining unauthorized access to the system. IBM X-Force ID: 126867...

PT-2017-13060

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 3.3 through 3.5 Description Sensitive data can be exposed, potentially allowing an attacker to gain unauthorized access to the system. Recommendations For versions 3.3 through 3.5, update to a version...

Moderate: Red Hat Security Advisory: jboss-ec2-eap security, bug fix, and enhancement update

An update for jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

IBM TRIRIGA Application Platform Remote Elevation of Privilege Vulnerability

The IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. The platform provides a set of design-time and run-time components for building and running its enterprise applications, respectively, and supports...

CVE-2017-1171

The IBM TRIRIGA Application Platform 3.3, 3,4, and 3,5 contain a vulnerability that could allow an authenticated user to execute Application actions they do not have access to. IBM Reference : 2001083...

CVE-2017-1171

The IBM TRIRIGA Application Platform 3.3, 3,4, and 3,5 contain a vulnerability that could allow an authenticated user to execute Application actions they do not have access to. IBM Reference : 2001083...

CVE-2017-1171

The IBM TRIRIGA Application Platform vulnerability CVE-2017-1171 allows an authenticated user to execute Application actions they do not have access to. Affected versions are 3.3.0–3.3.2.5, 3.4.0–3.4.2.5, and 3.5.0–3.5.2.0. Remediation: apply fixes in IBM TRIRIGA Platform 3.3.2.6, 3.4.2.6, or 3.5...

PT-2017-12193

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 3.3, 3.4, 3.5 Description The issue allows an authenticated user to execute Application actions they do not have access to. Recommendations For versions 3.3, 3.4, 3.5, at the moment, there is no...