Security Bulletin: IBM TRIRIGA Application Platform Cross-Site Scripting (XSS) (CVE-2016-9737)

Summary The IBM TRIRIGA Application is vulnerable to a Cross-Site Scripting attack. Vulnerability Details CVEID: CVE-2016-9737 DESCRIPTION: IBM TRIRIGA is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intende...

CVE-2016-9737

CVE-2016-9737 affects IBM TRIRIGA Application Platform versions 3.3, 3.4, and 3.5, which are vulnerable to cross-site scripting via the Web UI, potentially allowing an attacker to inject arbitrary JavaScript and disclose credentials in a trusted session. The IBM Security Bulletin lists affected r...