Ibm

Tririga Application Platform

46 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2017-1180

  • EPSS 0.19%
  • Published 05.04.2017 18:59:00
  • Last modified 20.04.2025 01:37:25

The IBM TRIRIGA Document Manager contains a vulnerability that could allow an authenticated user to execute actions they did not have access to. IBM Reference #: 2001084.

4.3

CVE-2017-1171

  • EPSS 0.19%
  • Published 31.03.2017 18:59:00
  • Last modified 20.04.2025 01:37:25

The IBM TRIRIGA Application Platform 3.3, 3,4, and 3,5 contain a vulnerability that could allow an authenticated user to execute Application actions they do not have access to. IBM Reference #: 2001083.

8.8

CVE-2017-1153

  • EPSS 0.53%
  • Published 27.03.2017 22:59:00
  • Last modified 20.04.2025 01:37:25

IBM TRIRIGA Report Manager 3.2 through 3.5 contains a vulnerability that could allow an authenticated user to execute actions that they do not have access to. IBM Reference #: 1999563.

5.4

CVE-2016-9737

  • EPSS 0.23%
  • Published 27.03.2017 22:59:00
  • Last modified 20.04.2025 01:37:25

IBM TRIRIGA 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trus...

6.1

CVE-2016-6000

  • EPSS 0.24%
  • Published 01.02.2017 20:59:01
  • Last modified 20.04.2025 01:37:25

IBM TRIRIGA Application Platform is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a t...

5.4

CVE-2016-5980

  • EPSS 0.23%
  • Published 01.02.2017 20:59:01
  • Last modified 20.04.2025 01:37:25

IBM TRIRIGA Application Platform is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a t...

8.8

CVE-2016-2917

  • EPSS 0.51%
  • Published 30.11.2016 20:59:03
  • Last modified 12.04.2025 10:46:40

The notifications component in IBM TRIRIGA Applications 10.4 and 10.5 before 10.5.1 allows remote authenticated users to obtain sensitive password information, and consequently gain privileges, via unspecified vectors.

5.4

CVE-2016-2883

  • EPSS 0.17%
  • Published 02.07.2016 14:59:16
  • Last modified 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulner...

4.3

CVE-2016-2882

  • EPSS 0.16%
  • Published 02.07.2016 14:59:15
  • Last modified 12.04.2025 10:46:40

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to obtain sensitive information by reading HTTP responses.

5.4

CVE-2016-0387

  • EPSS 0.17%
  • Published 02.07.2016 14:59:01
  • Last modified 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulner...