Security Bulletin: IBM TRIRIGA Application Platform Cross Site Scripting Vulnerability (CVE-2016-0344)

Summary The IBM TRIRIGA Application Platform is vulnerable to a cross site scripting attack within My Reports. Vulnerability Details CVEID: CVE-2016-0344 CVSS Base Score: 5.4 CVSS Temporal Score: See for the current score CVSS Environmental Score: Undefined CVSS Vector:...

CVE-2016-0344

CVE-2016-0344 is an XSS vulnerability in IBM TRIRIGA Application Platform (My Reports) affecting versions 3.3 prior to 3.3.2.6, 3.4 prior to 3.4.2.3, and 3.5 prior to 3.5.0.1. The root cause is an XSS flaw in the My Reports component that allows remote injection of script/HTML via unspecified vec...