CVE-2016-0387

Cross-site scripting XSS vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-2883...

CVE-2016-0387

Summary: CVE-2016-0387 is an IBM TRIRIGA Application Platform XSS vulnerability. The issue arises from improper validation of user-supplied input, allowing remote, authenticated users to execute arbitrary script via a crafted URL. Affected versions are 3.3 (before 3.3.2.6), 3.4 (before 3.4.2.4), ...