Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to hijack the authentication of administrators for requests that delete employees...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-0387...

Design/Logic Flaw

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to obtain sensitive information by reading HTTP responses...

CVE-2016-0387

Summary: CVE-2016-0387 is an IBM TRIRIGA Application Platform XSS vulnerability. The issue arises from improper validation of user-supplied input, allowing remote, authenticated users to execute arbitrary script via a crafted URL. Affected versions are 3.3 (before 3.3.2.6), 3.4 (before 3.4.2.4), ...

CVE-2016-2882

CVE-2016-2882 affects IBM TRIRIGA Application Platform 3.3 (pre-3.3.2.6), 3.4 (pre-3.4.2.4), and 3.5 (pre-3.5.0.2). The vulnerability allows remote authenticated users to obtain sensitive information by reading HTTP responses. The IBM Security Bulletin confirms affected versions and provides fixe...

CVE-2016-2883

IBM TRIRIGA Application Platform is affected by CVE-2016-2883, a cross-site scripting (XSS) vulnerability caused by improper validation of user-supplied input. A remote authenticated attacker can execute script or HTML in a victim’s browser via a specially crafted URL. Affected versions are: 3.3 ...

PT-2016-4178

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 3.3 before 3.3.2.6 IBM TRIRIGA Application Platform versions 3.4 before 3.4.2.4 IBM TRIRIGA Application Platform versions 3.5 before 3.5.0.2 Description A cross-site scripting XSS issue allows remote...

CVE-2016-0386: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to hijack the authentication of administrators for requests that delete employees...

PT-2016-4177

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 3.3 before 3.3.2.6 IBM TRIRIGA Application Platform versions 3.4 before 3.4.2.4 IBM TRIRIGA Application Platform versions 3.5 before 3.5.0.2 Description A cross-site request forgery CSRF issue allows...

PT-2016-5266

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 3.3 before 3.3.2.6 IBM TRIRIGA Application Platform versions 3.4 before 3.4.2.4 IBM TRIRIGA Application Platform versions 3.5 before 3.5.0.2 Description The issue allows remote authenticated users to...

CVE-2016-2883: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-0387...

PT-2016-5267

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 3.3 before 3.3.2.6 IBM TRIRIGA Application Platform versions 3.4 before 3.4.2.4 IBM TRIRIGA Application Platform versions 3.5 before 3.5.0.2 Description A cross-site scripting XSS issue allows remote...

CVE-2016-0387: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-2883...

CVE-2016-2882: Exposure of Sensitive Information to an Unauthorized Actor

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to obtain sensitive information by reading HTTP responses...

CVE-2016-0374

The builder tools in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allow remote authenticated users to gain privileges for application modification via unspecified vectors...

Code injection

The builder tools in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allow remote authenticated users to gain privileges for application modification via unspecified vectors...

CVE-2016-0362

Vulnerability (CVE-2016-0362) affects IBM TRIRIGA Application Platform versions 3.3.x before 3.3.2.6, 3.4.x before 3.4.2.4, and 3.5.x before 3.5.0.2. The issue is a server-side request forgery (SSRF) via a crafted proxy request to a web service, allowing remote authenticated users to trigger netw...

CVE-2016-0374

Summary (CVE-2016-0374): IBM TRIRIGA Application Platform builder tools (versions 3.3 before 3.3.2.6; 3.4 before 3.4.2.4; 3.5 before 3.5.0.2) are affected. A security issue allows remote authenticated users to gain privileges for application modification via unspecified vectors. IBM’s bulletin id...

PT-2016-4162

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 3.3 before 3.3.2.6 IBM TRIRIGA Application Platform versions 3.4 before 3.4.2.4 IBM TRIRIGA Application Platform versions 3.5 before 3.5.0.2 Description The issue allows remote authenticated users to...

CVE-2016-0362: Undefined Security Weakness

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to conduct server-side request forgery SSRF attacks, and trigger network traffic to arbitrary intranet or Internet hosts, via a crafted proxy request to a web service...