Ibm Tririga Application Platform vulnerabilities

51 known vulnerabilities affecting ibm/tririga_application_platform.

Total CVEs

CISA KEV

Public exploits

Exploited in wild

Severity breakdown

HIGH17MEDIUM27LOW7

Vulnerabilities

SortPage 2 of 3

CVE-2017-1180P4MEDIUMCVSS 5.3v3.3.0.0v3.3.0.1+29 more2017-04-05

CVE-2017-1180 [MEDIUM] CVE-2017-1180: The IBM TRIRIGA Document Manager contains a vulnerability that could allow an authenticated user to The IBM TRIRIGA Document Manager contains a vulnerability that could allow an authenticated user to execute actions they did not have access to. IBM Reference #: 2001084.

nvd

CVE-2016-0299P4MEDIUMCVSS 5.3≥ 3.3.0.0, < 3.3.2.6≥ 3.4.0.0, < 3.4.2.3+1 more2018-02-28

CVE-2016-0299 [MEDIUM] CWE-200 CVE-2016-0299: IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allo IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote attackers to obtain sensitive information via vectors involving a database query. IBM X-Force ID: 111382.

nvd

CVE-2026-11372P4MEDIUMCVSS 5.4v5.0.2v5.0.3+1 more2026-06-22

CVE-2026-11372 [MEDIUM] CWE-79 CVE-2026-11372: IBM TRIRIGA Application Platform 5.0.2 through 5.0.3 is vulnerable to cross-site scripting. This vul IBM TRIRIGA Application Platform 5.0.2 through 5.0.3 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

nvd

CVE-2012-5950P4MEDIUMCVSS 6.8v2.1v2.5+7 more2013-04-23

CVE-2012-5950 [MEDIUM] CWE-352 CVE-2012-5950: Multiple cross-site request forgery (CSRF) vulnerabilities in IBM TRIRIGA Application Platform 2.x a Multiple cross-site request forgery (CSRF) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to hijack the authentication of arbitrary users for requests that modify data records via vectors involving (1) the html/en/default/ directory or (2) sqa/html/en/default/process/comm/saveProps.jsp.

nvd

CVE-2014-8895P4MEDIUMCVSS 4.3v3.2.1v3.3.2.0+5 more2015-01-29

CVE-2014-8895 [MEDIUM] CWE-264 CVE-2014-8895: IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allows remo IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allows remote attackers to bypass intended access restrictions and read the image files of arbitrary users via a crafted URL.

nvd

CVE-2017-1465P4MEDIUMCVSS 5.4v3.3.0.0v3.3.0.1+42 more2017-12-07

CVE-2017-1465 [MEDIUM] CWE-79 CVE-2017-1465: IBM TRIRIGA 3.2, 3.3, 3.4, and 3.5 could allow a remote attacker to hijack the clicking action of th IBM TRIRIGA 3.2, 3.3, 3.4, and 3.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 128464.

nvd

CVE-2016-6000P4MEDIUMCVSS 6.1v3.3.0.0v3.3.0.1+26 more2017-02-01

CVE-2016-6000 [MEDIUM] CWE-79 CVE-2016-6000: IBM TRIRIGA Application Platform is vulnerable to cross-site scripting. This vulnerability allows us IBM TRIRIGA Application Platform is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

nvd

CVE-2016-0344P4MEDIUMCVSS 5.4≥ 3.3.0.0, < 3.3.2.6≥ 3.4.0.0, ≤ 3.4.2.3+1 more2018-02-21

CVE-2016-0344 [MEDIUM] CWE-79 CVE-2016-0344: Cross-site scripting (XSS) vulnerability in the My Reports component in IBM TRIRIGA Application Plat Cross-site scripting (XSS) vulnerability in the My Reports component in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 111785.

nvd

CVE-2017-1372P4MEDIUMCVSS 5.4v3.3.0.0v3.3.0.1+40 more2017-07-21

CVE-2017-1372 [MEDIUM] CWE-79 CVE-2017-1372: IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulne IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126865.

nvd

CVE-2016-9737P4MEDIUMCVSS 5.4v3.3.0.0v3.3.0.1+24 more2017-03-27

CVE-2016-9737 [MEDIUM] CWE-79 CVE-2016-9737: IBM TRIRIGA 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulnerability allows users IBM TRIRIGA 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1996200.

nvd

CVE-2020-4868P4MEDIUMCVSS 5.3≥ 3.0, < 4.5v3.0, 4.0, 4.42023-07-31

CVE-2020-4868 [MEDIUM] CWE-209 CVE-2020-4868: IBM TRIRIGA 3.0, 4.0, and 4.4 could allow a remote attacker to obtain sensitive information when a d IBM TRIRIGA 3.0, 4.0, and 4.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 190744.

nvd

CVE-2022-43914P4MEDIUMCVSS 5.4≥ 4.0, < 4.0.3v4.02023-04-07

CVE-2022-43914 [MEDIUM] CWE-79 CVE-2022-43914: IBM TRIRIGA Application Platform 4.0 is vulnerable to cross-site scripting. This vulnerability allow IBM TRIRIGA Application Platform 4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 241036.

nvd

CVE-2014-4839P4MEDIUMCVSS 6.0v3.2v3.3.0.0+6 more2014-10-29

CVE-2014-4839 [MEDIUM] CWE-352 CVE-2014-4839: Cross-site request forgery (CSRF) vulnerability in birtviewer.query in IBM TRIRIGA Application Platf Cross-site request forgery (CSRF) vulnerability in birtviewer.query in IBM TRIRIGA Application Platform 3.2 and 3.3 before 3.3.0.2, 3.3.1 before 3.3.1.3, 3.3.2 before 3.3.2.2, and 3.4 before 3.4.0.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.

nvd

CVE-2016-0387P4MEDIUMCVSS 5.4v3.3.0.0v3.3.0.1+21 more2016-07-02

CVE-2016-0387 [MEDIUM] CWE-79 CVE-2016-0387: Cross-site scripting (XSS) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 Cross-site scripting (XSS) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-2883.

nvd

CVE-2016-2883P4MEDIUMCVSS 5.4v3.3.0.0v3.3.0.1+20 more2016-07-02

CVE-2016-2883 [MEDIUM] CVE-2016-2883: Cross-site scripting (XSS) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 Cross-site scripting (XSS) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-0387.

nvd

CVE-2016-5980P4MEDIUMCVSS 5.4v3.3.0.0v3.3.0.1+26 more2017-02-01

CVE-2016-5980 [MEDIUM] CWE-79 CVE-2016-5980: IBM TRIRIGA Application Platform is vulnerable to cross-site scripting. This vulnerability allows us IBM TRIRIGA Application Platform is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

nvd

CVE-2018-2008P4MEDIUMCVSS 4.3≥ 3.5.3.0, < 3.5.3.6≥ 3.6.0.0, < 3.6.0.3+2 more2019-05-07

CVE-2018-2008 [MEDIUM] CWE-200 CVE-2018-2008: IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 could disclose sensitive information to an authenti IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 could disclose sensitive information to an authenticated user that could aid in further attacks against the system. IBM X-Force ID: 155146.

nvd

CVE-2014-8894P4MEDIUMCVSS 4.9v3.2.1v3.3.2.0+5 more2015-01-29

CVE-2014-8894 [MEDIUM] CVE-2014-8894: Open redirect vulnerability in IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3 Open redirect vulnerability in IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via the out parameter.

nvd

CVE-2016-0345P4MEDIUMCVSS 4.3≥ 3.3.0.0, < 3.3.2.6≥ 3.4.0.0, < 3.4.2.3+1 more2018-02-21

CVE-2016-0345 [MEDIUM] CWE-200 CVE-2016-0345: IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allo IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to obtain the installation path via vectors involving Birt report rendering. IBM X-Force ID: 111786.

nvd

CVE-2012-5948P4MEDIUMCVSS 4.3v2.1v2.5+7 more2013-04-23

CVE-2012-5948 [MEDIUM] CWE-79 CVE-2012-5948: Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) WebProcess.srv, (2) the html/en/default/ directory, (3) Widget/resource, (4) birt/frameset, or (5) ganttlib/gantt-jws.jnlp.

nvd

← Previous2 / 3Next →