CVE-2014-8893

CVE-2014-8893 has concrete details in IBM TRIRIGA Application Platform: XSS in mainpage.jsp and GetImageServlet.img affecting versions 3.2.1.x, 3.3.2.x (≤3.3.2.2) and 3.4.1.x (≤3.4.1.1). Root cause is improper input validation allowing remote authenticated users to inject script via crafted URLs,...

PT-2015-4112

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 3.2.1.x through 3.3.2 before 3.3.2.3 IBM TRIRIGA Application Platform versions 3.4.1 before 3.4.1.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the mainpage.jsp...

CVE-2014-8893: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in 1 mainpage.jsp and 2 GetImageServlet.img in IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted URL...