Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm tririga application platform 3.3.0.0 vulnerabilities and exploits

(subscribe to this query)
534
VMScore
CVE-2016-0348
Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3, 3.3.1, 3.3.2, and 3.4 allows remote malicious users to hijack the authentication of arbitrary users for requests that insert XSS sequences. IBM X-Force ID: 111813.
Ibm Tririga Application Platform 3.3.1.0Ibm Tririga Application Platform 3.4.0.0Ibm Tririga Application Platform 3.3.0.0Ibm Tririga Application Platform 3.3.2.0
312
VMScore
CVE-2013-6726
Multiple cross-site scripting (XSS) vulnerabilities in WebProcess.srv in IBM TRIRIGA Application Platform 3.2.x and 3.3.x prior to 3.3.1.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Ibm Tririga Application Platform 3.3.0.1Ibm Tririga Application Platform 3.3.0.0Ibm Tririga Application Platform 3.2Ibm Tririga Application Platform 3.2.1Ibm Tririga Application Platform 3.3.1.1Ibm Tririga Application Platform 3.3.1.0
534
VMScore
CVE-2014-4839
Cross-site request forgery (CSRF) vulnerability in birtviewer.query in IBM TRIRIGA Application Platform 3.2 and 3.3 prior to 3.3.0.2, 3.3.1 prior to 3.3.1.3, 3.3.2 prior to 3.3.2.2, and 3.4 prior to 3.4.0.1 allows remote authenticated users to hijack the authentication of arbitra...
Ibm Tririga Application Platform 3.2Ibm Tririga Application Platform 3.3.0.0Ibm Tririga Application Platform 3.3.0.1Ibm Tririga Application Platform 3.3.1.1Ibm Tririga Application Platform 3.3.1.2Ibm Tririga Application Platform 3.3.2.0Ibm Tririga Application Platform 3.3.2.1Ibm Tririga Application Platform 3.4.0.0
312
VMScore
CVE-2013-4003
Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x prior to 3.3.1.1, and 8, allow remote authenticated users to inject arbitrary web script or HTML via (1) unspecified input to WebProcess.srv, (2) unspecified input to html/en/defau...
Ibm Tririga Application Platform 3.2.1Ibm Tririga Application Platform 3.3.0.0Ibm Tririga Application PlatformIbm Tririga Application Platform 3.0Ibm Tririga Application Platform 2.7Ibm Tririga Application Platform 2.6Ibm Tririga Application Platform 2.5Ibm Tririga Application Platform 2.1Ibm Tririga Application Platform 3.2Ibm Tririga Application Platform 3.1
312
VMScore
CVE-2014-4838
Cross-site scripting (XSS) vulnerability in GanttProjectSchedulerPopup.jsp in IBM TRIRIGA Application Platform 3.2 and 3.3 prior to 3.3.0.2, 3.3.1 prior to 3.3.1.3, 3.3.2 prior to 3.3.2.2, and 3.4 prior to 3.4.0.1 allows remote authenticated users to inject arbitrary web script o...
Ibm Tririga Application Platform 3.2Ibm Tririga Application Platform 3.3.2.0Ibm Tririga Application Platform 3.3.2.1Ibm Tririga Application Platform 3.2.1Ibm Tririga Application Platform 3.3.0.0Ibm Tririga Application Platform 3.4.0.0Ibm Tririga Application Platform 3.3.0.1Ibm Tririga Application Platform 3.3.1.0Ibm Tririga Application Platform 3.3.1.1Ibm Tririga Application Platform 3.3.1.2
312
VMScore
CVE-2014-4836
Cross-site scripting (XSS) vulnerability in breakOutWithName.jsp in IBM TRIRIGA Application Platform 3.2 and 3.3 prior to 3.3.0.2, 3.3.1 prior to 3.3.1.3, 3.3.2 prior to 3.3.2.2, and 3.4 prior to 3.4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via...
Ibm Tririga Application Platform 3.2Ibm Tririga Application Platform 3.3.1.0Ibm Tririga Application Platform 3.3.1.1Ibm Tririga Application Platform 3.3.1.2Ibm Tririga Application Platform 3.3.2.0Ibm Tririga Application Platform 3.2.1Ibm Tririga Application Platform 3.3.2.1Ibm Tririga Application Platform 3.4.0.0Ibm Tririga Application Platform 3.3.0.0Ibm Tririga Application Platform 3.3.0.1
312
VMScore
CVE-2014-4837
Cross-site scripting (XSS) vulnerability in NewDocument.jsp in IBM TRIRIGA Application Platform 3.2 and 3.3 prior to 3.3.0.2, 3.3.1 prior to 3.3.1.3, 3.3.2 prior to 3.3.2.2, and 3.4 prior to 3.4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a cr...
Ibm Tririga Application Platform 3.2.1Ibm Tririga Application Platform 3.3.0.0Ibm Tririga Application Platform 3.3.0.1Ibm Tririga Application Platform 3.3.1.0Ibm Tririga Application Platform 3.3.1.1Ibm Tririga Application Platform 3.3.1.2Ibm Tririga Application Platform 3.3.2.0Ibm Tririga Application Platform 3.2Ibm Tririga Application Platform 3.3.2.1Ibm Tririga Application Platform 3.4.0.0
668
VMScore
CVE-2014-4840
IBM TRIRIGA Application Platform 3.2 and 3.3 prior to 3.3.0.2, 3.3.1 prior to 3.3.1.3, 3.3.2 prior to 3.3.2.2, and 3.4 prior to 3.4.0.1 allows remote malicious users to execute arbitrary code via a crafted URL.
Ibm Tririga Application Platform 3.3.1.0Ibm Tririga Application Platform 3.3.1.1Ibm Tririga Application Platform 3.3.1.2Ibm Tririga Application Platform 3.3.2.0Ibm Tririga Application Platform 3.3.2.1Ibm Tririga Application Platform 3.2Ibm Tririga Application Platform 3.2.1Ibm Tririga Application Platform 3.4.0.0Ibm Tririga Application Platform 3.3.0.0Ibm Tririga Application Platform 3.3.0.1
490
VMScore
CVE-2016-0300
IBM TRIRIGA Application Platform 3.3 prior to 3.3.2.6, 3.4 prior to 3.4.2.3, and 3.5 prior to 3.5.0.1 might allow remote malicious users to access arbitrary JSP pages via vectors related to improper input validation. IBM X-Force ID: 111412.
Ibm Tririga Application Platform 3.3.0.2Ibm Tririga Application Platform 3.3.1.1Ibm Tririga Application Platform 3.3.2.5Ibm Tririga Application Platform 3.4.1.1Ibm Tririga Application Platform 3.3.1.3Ibm Tririga Application Platform 3.3.2.0Ibm Tririga Application Platform 3.3.2.1Ibm Tririga Application Platform 3.3.2.3Ibm Tririga Application Platform 3.3.1.0Ibm Tririga Application Platform 3.3.1.2Ibm Tririga Application Platform 3.3.2.4Ibm Tririga Application Platform 3.4.0.0Ibm Tririga Application Platform 3.4.1.2Ibm Tririga Application Platform 3.5.0.0Ibm Tririga Application Platform 3.3.0.0Ibm Tririga Application Platform 3.3.0.1Ibm Tririga Application Platform 3.4.1.3Ibm Tririga Application Platform 3.4.2.0Ibm Tririga Application Platform 3.4.2.1Ibm Tririga Application Platform 3.4.2.2
534
VMScore
CVE-2016-0386
Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3 prior to 3.3.2.6, 3.4 prior to 3.4.2.4, and 3.5 prior to 3.5.0.2 allows remote authenticated users to hijack the authentication of administrators for requests that delete employees.
Ibm Tririga Application Platform 3.5.0.0Ibm Tririga Application Platform 3.4.2.2Ibm Tririga Application Platform 3.3.2.5Ibm Tririga Application Platform 3.3.2.3Ibm Tririga Application Platform 3.3.1.1Ibm Tririga Application Platform 3.3.0.2Ibm Tririga Application Platform 3.3.0.0Ibm Tririga Application Platform 3.4.2.0Ibm Tririga Application Platform 3.4.1.3Ibm Tririga Application Platform 3.4.1.2Ibm Tririga Application Platform 3.4.1.1Ibm Tririga Application Platform 3.5.0.1Ibm Tririga Application Platform 3.3.2.1Ibm Tririga Application Platform 3.3.2.0Ibm Tririga Application Platform 3.3.1.3Ibm Tririga Application Platform 3.3.1.2Ibm Tririga Application Platform 3.4.2.3Ibm Tririga Application Platform 3.4.2.1Ibm Tririga Application Platform 3.4.0.0Ibm Tririga Application Platform 3.3.2.4Ibm Tririga Application Platform 3.3.1.0Ibm Tririga Application Platform 3.3.0.1
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook