8.8

CVE-2017-1373

Reports executed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute a report they do not have access to. IBM X-Force ID: 126866.

Data is provided by the National Vulnerability Database (NVD)
IbmTririga Application Platform Version3.3.0.0
IbmTririga Application Platform Version3.3.0.1
IbmTririga Application Platform Version3.3.0.2
IbmTririga Application Platform Version3.3.1.0
IbmTririga Application Platform Version3.3.1.1
IbmTririga Application Platform Version3.3.1.2
IbmTririga Application Platform Version3.3.1.3
IbmTririga Application Platform Version3.3.2.0
IbmTririga Application Platform Version3.3.2.1
IbmTririga Application Platform Version3.3.2.2
IbmTririga Application Platform Version3.3.2.3
IbmTririga Application Platform Version3.3.2.4
IbmTririga Application Platform Version3.3.2.5
IbmTririga Application Platform Version3.4.0.0
IbmTririga Application Platform Version3.4.0.1
IbmTririga Application Platform Version3.4.1.0
IbmTririga Application Platform Version3.4.1.1
IbmTririga Application Platform Version3.4.1.2
IbmTririga Application Platform Version3.4.1.3
IbmTririga Application Platform Version3.4.2.0
IbmTririga Application Platform Version3.4.2.1
IbmTririga Application Platform Version3.4.2.2
IbmTririga Application Platform Version3.4.2.3
IbmTririga Application Platform Version3.4.2.4
IbmTririga Application Platform Version3.4.2.5
IbmTririga Application Platform Version3.5.0.0
IbmTririga Application Platform Version3.5.0.1
IbmTririga Application Platform Version3.5.0.2
IbmTririga Application Platform Version3.5.1.1
IbmTririga Application Platform Version3.5.1.2
IbmTririga Application Platform Version3.5.1.3
IbmTririga Application Platform Version3.5.2.1
IbmTririga Application Platform Version3.5.2.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.6% 0.668
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 6.5 8 6.4
AV:N/AC:L/Au:S/C:P/I:P/A:P