353 matches found
EUVD-2026-104675
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication...
CVE-2026-107400
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication...
CVE-2026-107400
IBM TRIRIGA Application Platform versions 5.0.0 through 5.0.8 are vulnerable to a security flaw caused by improper authentication (CWE-287). This vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution on the target system. To remediate this issue, users shou...
CVE-2026-107400 Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication...
Security Bulletin: Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication
Summary GWT Mock Authentication Privilege Escalation in IBM TRIRIGA Vulnerability Details CVEID:CVE-2026-107400 DESCRIPTION: IBM TRIRIGA could allow a remote authenticated attacker to execute arbitrary code due to improper authentication. CWE:CWE-287: Improper Authentication CVSS Source: IBM CVSS...
Security Bulletin: Security Vulnerability identified in IBM TRIRIGA - Zip Slip
Summary Security Vulnerability in IBM TRIRIGA - Zip Slip Path Traversal Vulnerability Details CVEID:CVE-2026-102627 DESCRIPTION: IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of file paths duri...
Security Bulletin: Security Vulnerability identified in IBM TRIRIGA - XXE ( XML External Entitity )
Summary There is a vulnerability in IBM TRIRIGA - XXE XML External Entitity Vulnerability Details CVEID:CVE-2026-93891 DESCRIPTION: IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity XXE...
Security Bulletin: Security Vulnerability identified in IBM TRIRIGA - Information Disclosure in Admin Console
Summary Session Token exposure in Admin console in versions below 5.0.9 Vulnerability Details CVEID:CVE-2026-93892 DESCRIPTION: IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the...
EUVD-2026-98085
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity XXE injection flaw...
EUVD-2026-98084
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response...
EUVD-2026-98083
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of file paths during archive extraction...
CVE-2026-93892
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response...
CVE-2026-93891
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity XXE injection flaw...
CVE-2026-102627
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of file paths during archive extraction...
CVE-2026-93891
IBM TRIRIGA Application Platform versions 5.0.0 through 5.0.8 are susceptible to an XML external entity (XXE) injection flaw (CWE-611). This vulnerability allows a remote authenticated attacker to obtain sensitive information . To remediate this issue, users should upgrade to IBM TRIRIGA Applicat...
CVE-2026-93891 Security Vulnerability identified in IBM TRIRIGA - XXE
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity XXE injection flaw...
CVE-2026-93892
The IBM TRIRIGA Application Platform versions 5.0.0 through 5.0.8 are vulnerable to an information disclosure vulnerability (CWE-200). A remote authenticated attacker can obtain sensitive information because session tokens are exposed within the HTML response in the Admin console. To remediate th...
CVE-2026-93892 Security Vulnerability identified in IBM TRIRIGA - Information Disclosure in Admin Console
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response...
CVE-2026-102627 Security Vulnerability identified in IBM TRIRIGA - Zip Slip
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of file paths during archive extraction...
CVE-2026-102627
The IBM TRIRIGA Application Platform versions 5.0.0 through 5.0.8 are vulnerable to a Zip Slip path traversal vulnerability (CWE-22 ). A remote authenticated attacker could exploit improper validation of file paths during archive extraction to achieve arbitrary code execution . The vulnerability ...