Ibm

Tririga Application Platform

46 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2017-1180

  • EPSS 0.19%
  • Veröffentlicht 05.04.2017 18:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

The IBM TRIRIGA Document Manager contains a vulnerability that could allow an authenticated user to execute actions they did not have access to. IBM Reference #: 2001084.

4.3

CVE-2017-1171

  • EPSS 0.19%
  • Veröffentlicht 31.03.2017 18:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

The IBM TRIRIGA Application Platform 3.3, 3,4, and 3,5 contain a vulnerability that could allow an authenticated user to execute Application actions they do not have access to. IBM Reference #: 2001083.

8.8

CVE-2017-1153

  • EPSS 0.53%
  • Veröffentlicht 27.03.2017 22:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

IBM TRIRIGA Report Manager 3.2 through 3.5 contains a vulnerability that could allow an authenticated user to execute actions that they do not have access to. IBM Reference #: 1999563.

5.4

CVE-2016-9737

  • EPSS 0.23%
  • Veröffentlicht 27.03.2017 22:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

IBM TRIRIGA 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trus...

6.1

CVE-2016-6000

  • EPSS 0.24%
  • Veröffentlicht 01.02.2017 20:59:01
  • Zuletzt bearbeitet 20.04.2025 01:37:25

IBM TRIRIGA Application Platform is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a t...

5.4

CVE-2016-5980

  • EPSS 0.23%
  • Veröffentlicht 01.02.2017 20:59:01
  • Zuletzt bearbeitet 20.04.2025 01:37:25

IBM TRIRIGA Application Platform is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a t...

8.8

CVE-2016-2917

  • EPSS 0.51%
  • Veröffentlicht 30.11.2016 20:59:03
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The notifications component in IBM TRIRIGA Applications 10.4 and 10.5 before 10.5.1 allows remote authenticated users to obtain sensitive password information, and consequently gain privileges, via unspecified vectors.

5.4

CVE-2016-2883

  • EPSS 0.17%
  • Veröffentlicht 02.07.2016 14:59:16
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulner...

4.3

CVE-2016-2882

  • EPSS 0.16%
  • Veröffentlicht 02.07.2016 14:59:15
  • Zuletzt bearbeitet 12.04.2025 10:46:40

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to obtain sensitive information by reading HTTP responses.

5.4

CVE-2016-0387

  • EPSS 0.17%
  • Veröffentlicht 02.07.2016 14:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulner...