Lucene search

K
IbmTririga Application Platform*

12 matches found

CVE
CVE
added 2023/07/31 2:15 a.m.51 views

CVE-2020-4868

IBM TRIRIGA 3.0, 4.0, and 4.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 190744.

5.3CVSS4.4AI score0.00051EPSS
CVE
CVE
added 2019/05/07 7:29 p.m.48 views

CVE-2018-2008

IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 could disclose sensitive information to an authenticated user that could aid in further attacks against the system. IBM X-Force ID: 155146.

4.3CVSS4.1AI score0.00172EPSS
CVE
CVE
added 2019/05/07 7:29 p.m.47 views

CVE-2019-4207

IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 may disclose sensitive information only available to a local user that could be used in further attacks against the system. IBM X-Force ID: 159148.

4CVSS3.4AI score0.00041EPSS
CVE
CVE
added 2019/05/07 7:29 p.m.44 views

CVE-2019-4208

IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 159129.

7.1CVSS6.8AI score0.00397EPSS
CVE
CVE
added 2018/02/02 9:29 p.m.41 views

CVE-2016-0342

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to read or modify arbitrary reports by leveraging an incorrect grant of access. IBM X-Force ID: 111783.

5.5CVSS5.1AI score0.00091EPSS
CVE
CVE
added 2018/02/28 5:29 p.m.38 views

CVE-2016-0299

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote attackers to obtain sensitive information via vectors involving a database query. IBM X-Force ID: 111382.

5.3CVSS4.8AI score0.00172EPSS
CVE
CVE
added 2023/04/07 2:15 p.m.38 views

CVE-2022-43914

IBM TRIRIGA Application Platform 4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 241036.

5.4CVSS4.8AI score0.00135EPSS
CVE
CVE
added 2018/02/02 9:29 p.m.37 views

CVE-2016-0312

IBM TRIRIGA Application Platform before 3.3.2 allows remote attackers to obtain sensitive information via vectors related to granting unauthenticated access to Document Manager. IBM X-Force ID: 111486.

7.5CVSS6.9AI score0.00253EPSS
CVE
CVE
added 2018/02/21 4:29 p.m.36 views

CVE-2016-0345

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to obtain the installation path via vectors involving Birt report rendering. IBM X-Force ID: 111786.

4.3CVSS4AI score0.00119EPSS
CVE
CVE
added 2018/02/21 4:29 p.m.33 views

CVE-2016-0344

Cross-site scripting (XSS) vulnerability in the My Reports component in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 111785.

5.4CVSS5AI score0.00129EPSS
CVE
CVE
added 2013/08/29 12:7 p.m.32 views

CVE-2013-4003

Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3.1.1, and 8, allow remote authenticated users to inject arbitrary web script or HTML via (1) unspecified input to WebProcess.srv, (2) unspecified input to html/en/default/actionHandler/quer...

3.5CVSS5.3AI score0.00188EPSS
CVE
CVE
added 2018/02/21 4:29 p.m.31 views

CVE-2016-0343

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to obtain sensitive information by reading an error message. IBM X-Force ID: 111784.

4.3CVSS4AI score0.00119EPSS