PT-2013-4782

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 2.x through 3.x before 3.3.1.1 IBM TRIRIGA Application Platform version 8 Description The issue allows remote authenticated users to inject arbitrary web script or HTML. This can be achieved via...

PT-2013-1860

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 2.x through 3.x before 3.3 IBM TRIRIGA Application Platform version 8 Description The issue involves multiple cross-site scripting XSS vulnerabilities that allow remote attackers to inject arbitrary we...

CVE-2012-5948: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 WebProcess.srv, 2 the html/en/default/ directory, 3 Widget/resource, 4 birt/frameset, or 5...

PT-2013-1862

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 2.x through 3.x before 3.3 IBM TRIRIGA Application Platform version 8 Description The issue allows remote attackers to hijack the authentication of arbitrary users for requests that modify data records...

PT-2013-1861

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 2.x through 3.x before 3.3 IBM TRIRIGA Application Platform version 8 Description The issue allows remote attackers to inject content and conduct phishing attacks via several vectors, including the...

CVE-2012-5950: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to hijack the authentication of arbitrary users for requests that modify data records via vectors involving 1 the html/en/default/ directory or 2...