Lucene search

K
IbmTririga Application Platform3.5.3

5 matches found

CVE
CVE
added 2019/05/07 7:29 p.m.48 views

CVE-2018-2008

IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 could disclose sensitive information to an authenticated user that could aid in further attacks against the system. IBM X-Force ID: 155146.

4.3CVSS4.1AI score0.00172EPSS
CVE
CVE
added 2019/05/07 7:29 p.m.47 views

CVE-2019-4207

IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 may disclose sensitive information only available to a local user that could be used in further attacks against the system. IBM X-Force ID: 159148.

4CVSS3.4AI score0.00041EPSS
CVE
CVE
added 2017/12/07 3:29 p.m.46 views

CVE-2017-1465

IBM TRIRIGA 3.2, 3.3, 3.4, and 3.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the...

5.4CVSS5.4AI score0.0012EPSS
CVE
CVE
added 2019/05/07 7:29 p.m.44 views

CVE-2019-4208

IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 159129.

7.1CVSS6.8AI score0.00397EPSS
CVE
CVE
added 2020/04/17 2:15 p.m.40 views

CVE-2020-4277

IBM TRIRIGA Application Platform 3.5.3 and 3.6.1 discloses sensitive information in error messages that could aid an attacker formulate future attacks. IBM X-Force ID: 175993.

7.5CVSS7.1AI score0.0018EPSS