Tririga Application Platform Security Vulnerabilities and Issues — Tririga Application Platform CVE List

Lucene search

IbmTririga Application Platform

8 matches found

CVE•added 2018/02/02 9:29 p.m.•41 views

CVE-2016-0342

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to read or modify arbitrary reports by leveraging an incorrect grant of access. IBM X-Force ID: 111783.

5.5CVSS5.1AI score0.00091EPSS

CVE•added 2018/02/21 4:29 p.m.•41 views

CVE-2016-0348

Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3, 3.3.1, 3.3.2, and 3.4 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. IBM X-Force ID: 111813.

8CVSS7.6AI score0.00179EPSS

CVE•added 2018/02/28 5:29 p.m.•38 views

CVE-2016-0299

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote attackers to obtain sensitive information via vectors involving a database query. IBM X-Force ID: 111382.

5.3CVSS4.8AI score0.00172EPSS

CVE•added 2018/02/02 9:29 p.m.•37 views

CVE-2016-0312

IBM TRIRIGA Application Platform before 3.3.2 allows remote attackers to obtain sensitive information via vectors related to granting unauthenticated access to Document Manager. IBM X-Force ID: 111486.

7.5CVSS6.9AI score0.00253EPSS

CVE•added 2018/02/21 4:29 p.m.•36 views

CVE-2016-0345

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to obtain the installation path via vectors involving Birt report rendering. IBM X-Force ID: 111786.

4.3CVSS4AI score0.00119EPSS

CVE•added 2018/02/02 9:29 p.m.•35 views

CVE-2016-0300

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 might allow remote attackers to access arbitrary JSP pages via vectors related to improper input validation. IBM X-Force ID: 111412.

5.5CVSS5.3AI score0.00138EPSS

CVE•added 2018/02/21 4:29 p.m.•33 views

CVE-2016-0344

Cross-site scripting (XSS) vulnerability in the My Reports component in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 111785.

5.4CVSS5AI score0.00129EPSS

CVE•added 2018/02/21 4:29 p.m.•31 views

CVE-2016-0343

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to obtain sensitive information by reading an error message. IBM X-Force ID: 111784.

4.3CVSS4AI score0.00119EPSS