Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Tririga Application Platform
Total 46 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-0344 1 Ibm 1 Tririga Application Platform 2024-11-21 3.5 LOW 5.4 MEDIUM
Cross-site scripting (XSS) vulnerability in the My Reports component in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 111785.
CVE-2016-0343 1 Ibm 1 Tririga Application Platform 2024-11-21 4.0 MEDIUM 4.3 MEDIUM
IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to obtain sensitive information by reading an error message. IBM X-Force ID: 111784.
CVE-2016-0342 1 Ibm 1 Tririga Application Platform 2024-11-21 5.5 MEDIUM 5.4 MEDIUM
IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to read or modify arbitrary reports by leveraging an incorrect grant of access. IBM X-Force ID: 111783.
CVE-2016-0312 1 Ibm 1 Tririga Application Platform 2024-11-21 5.0 MEDIUM 7.5 HIGH
IBM TRIRIGA Application Platform before 3.3.2 allows remote attackers to obtain sensitive information via vectors related to granting unauthenticated access to Document Manager. IBM X-Force ID: 111486.
CVE-2016-0300 1 Ibm 1 Tririga Application Platform 2024-11-21 5.5 MEDIUM 5.4 MEDIUM
IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 might allow remote attackers to access arbitrary JSP pages via vectors related to improper input validation. IBM X-Force ID: 111412.
CVE-2016-0299 1 Ibm 1 Tririga Application Platform 2024-11-21 5.0 MEDIUM 5.3 MEDIUM
IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote attackers to obtain sensitive information via vectors involving a database query. IBM X-Force ID: 111382.