PT-2016-6411

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Enterprise Application Platform EAP versions prior to 7.0.2 Description The issue concerns the domain controller in Red Hat JBoss Enterprise Application Platform EAP, where remote authenticated users can gain privileges. This is...

Important: Red Hat Security Advisory: JBoss Enterprise Application Platform 7.0.2 for RHEL 7

Updated packages that provide Red Hat JBoss Enterprise Application Platform 7.0.2, fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scori...

Tryton Information Disclosure Vulnerability

Tryton is a set of general-purpose application platform based on Python and PostgreSQL. It is an independent branch project of OpenERP Enterprise Resource Planning ERP and Customer Relationship Management CRM system, which contains modules for financial management, marketing management, customer...

Buffer overflow vulnerability in multiple Huawei products (CNVD-2016-06332)

The Huawei USG5500, USG2100, USG2200, and USG5100 are firewall products from Huawei China. A buffer overflow vulnerability exists in multiple Huawei products, which stems from the program failing to perform proper boundary checks on user-submitted input. A remote attacker could exploit the...

New too openEAP enterprise application platform without the log file upload vulnerability

No description provided by source...

IBM TRIRIGA Application Platform Cross-Site Scripting Vulnerability (CNVD-2016-05021)

IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. A cross-site scripting vulnerability exists in IBM TRIRIGA Application Platform, which can be exploited by an attacker to inject arbitrary Web script or HTML...

CVE-2016-0387

Cross-site scripting XSS vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-2883...

Design/Logic Flaw

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to obtain sensitive information by reading HTTP responses...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-0387...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to hijack the authentication of administrators for requests that delete employees...

CVE-2016-2883

IBM TRIRIGA Application Platform is affected by CVE-2016-2883, a cross-site scripting (XSS) vulnerability caused by improper validation of user-supplied input. A remote authenticated attacker can execute script or HTML in a victim’s browser via a specially crafted URL. Affected versions are: 3.3 ...

CVE-2016-0387

Summary: CVE-2016-0387 is an IBM TRIRIGA Application Platform XSS vulnerability. The issue arises from improper validation of user-supplied input, allowing remote, authenticated users to execute arbitrary script via a crafted URL. Affected versions are 3.3 (before 3.3.2.6), 3.4 (before 3.4.2.4), ...

CVE-2016-2882

CVE-2016-2882 affects IBM TRIRIGA Application Platform 3.3 (pre-3.3.2.6), 3.4 (pre-3.4.2.4), and 3.5 (pre-3.5.0.2). The vulnerability allows remote authenticated users to obtain sensitive information by reading HTTP responses. The IBM Security Bulletin confirms affected versions and provides fixe...

CVE-2016-2882: Exposure of Sensitive Information to an Unauthorized Actor

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to obtain sensitive information by reading HTTP responses...

CVE-2016-2883: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-0387...

PT-2016-5266

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 3.3 before 3.3.2.6 IBM TRIRIGA Application Platform versions 3.4 before 3.4.2.4 IBM TRIRIGA Application Platform versions 3.5 before 3.5.0.2 Description The issue allows remote authenticated users to...

CVE-2016-0386: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to hijack the authentication of administrators for requests that delete employees...

PT-2016-4177

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 3.3 before 3.3.2.6 IBM TRIRIGA Application Platform versions 3.4 before 3.4.2.4 IBM TRIRIGA Application Platform versions 3.5 before 3.5.0.2 Description A cross-site request forgery CSRF issue allows...

CVE-2016-0387: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-2883...

PT-2016-4178

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 3.3 before 3.3.2.6 IBM TRIRIGA Application Platform versions 3.4 before 3.4.2.4 IBM TRIRIGA Application Platform versions 3.5 before 3.5.0.2 Description A cross-site scripting XSS issue allows remote...