Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm tririga application platform 3.3.2.0 vulnerabilities and exploits

(subscribe to this query)
534
VMScore
CVE-2016-0348
Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3, 3.3.1, 3.3.2, and 3.4 allows remote malicious users to hijack the authentication of arbitrary users for requests that insert XSS sequences. IBM X-Force ID: 111813.
Ibm Tririga Application Platform 3.3.1.0Ibm Tririga Application Platform 3.4.0.0Ibm Tririga Application Platform 3.3.0.0Ibm Tririga Application Platform 3.3.2.0
436
VMScore
CVE-2014-8894
Open redirect vulnerability in IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 prior to 3.3.2.3, and 3.4.1 prior to 3.4.1.1 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via the out parameter.
Ibm Tririga Application Platform 3.4.0.0Ibm Tririga Application Platform 3.3.2.0Ibm Tririga Application Platform 3.3.2.1Ibm Tririga Application Platform 3.4.1.0Ibm Tririga Application Platform 3.4.0.1Ibm Tririga Application Platform 3.3.2.2Ibm Tririga Application Platform 3.2.1
312
VMScore
CVE-2014-8893
Multiple cross-site scripting (XSS) vulnerabilities in (1) mainpage.jsp and (2) GetImageServlet.img in IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 prior to 3.3.2.3, and 3.4.1 prior to 3.4.1.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafte...
Ibm Tririga Application Platform 3.2.1Ibm Tririga Application Platform 3.4.0.0Ibm Tririga Application Platform 3.3.2.0Ibm Tririga Application Platform 3.4.1.0Ibm Tririga Application Platform 3.4.0.1Ibm Tririga Application Platform 3.3.2.1Ibm Tririga Application Platform 3.3.2.2
383
VMScore
CVE-2014-8895
IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 prior to 3.3.2.3, and 3.4.1 prior to 3.4.1.1 allows remote malicious users to bypass intended access restrictions and read the image files of arbitrary users via a crafted URL.
Ibm Tririga Application Platform 3.4.1.0Ibm Tririga Application Platform 3.3.2.0Ibm Tririga Application Platform 3.3.2.1Ibm Tririga Application Platform 3.4.0.1Ibm Tririga Application Platform 3.4.0.0Ibm Tririga Application Platform 3.3.2.2Ibm Tririga Application Platform 3.2.1
534
VMScore
CVE-2014-4839
Cross-site request forgery (CSRF) vulnerability in birtviewer.query in IBM TRIRIGA Application Platform 3.2 and 3.3 prior to 3.3.0.2, 3.3.1 prior to 3.3.1.3, 3.3.2 prior to 3.3.2.2, and 3.4 prior to 3.4.0.1 allows remote authenticated users to hijack the authentication of arbitra...
Ibm Tririga Application Platform 3.2Ibm Tririga Application Platform 3.3.0.0Ibm Tririga Application Platform 3.3.0.1Ibm Tririga Application Platform 3.3.1.1Ibm Tririga Application Platform 3.3.1.2Ibm Tririga Application Platform 3.3.2.0Ibm Tririga Application Platform 3.3.2.1Ibm Tririga Application Platform 3.4.0.0
312
VMScore
CVE-2014-4836
Cross-site scripting (XSS) vulnerability in breakOutWithName.jsp in IBM TRIRIGA Application Platform 3.2 and 3.3 prior to 3.3.0.2, 3.3.1 prior to 3.3.1.3, 3.3.2 prior to 3.3.2.2, and 3.4 prior to 3.4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via...
Ibm Tririga Application Platform 3.2Ibm Tririga Application Platform 3.3.1.0Ibm Tririga Application Platform 3.3.1.1Ibm Tririga Application Platform 3.3.1.2Ibm Tririga Application Platform 3.3.2.0Ibm Tririga Application Platform 3.2.1Ibm Tririga Application Platform 3.3.2.1Ibm Tririga Application Platform 3.4.0.0Ibm Tririga Application Platform 3.3.0.0Ibm Tririga Application Platform 3.3.0.1
312
VMScore
CVE-2014-4837
Cross-site scripting (XSS) vulnerability in NewDocument.jsp in IBM TRIRIGA Application Platform 3.2 and 3.3 prior to 3.3.0.2, 3.3.1 prior to 3.3.1.3, 3.3.2 prior to 3.3.2.2, and 3.4 prior to 3.4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a cr...
Ibm Tririga Application Platform 3.2.1Ibm Tririga Application Platform 3.3.0.0Ibm Tririga Application Platform 3.3.0.1Ibm Tririga Application Platform 3.3.1.0Ibm Tririga Application Platform 3.3.1.1Ibm Tririga Application Platform 3.3.1.2Ibm Tririga Application Platform 3.3.2.0Ibm Tririga Application Platform 3.2Ibm Tririga Application Platform 3.3.2.1Ibm Tririga Application Platform 3.4.0.0
312
VMScore
CVE-2014-4838
Cross-site scripting (XSS) vulnerability in GanttProjectSchedulerPopup.jsp in IBM TRIRIGA Application Platform 3.2 and 3.3 prior to 3.3.0.2, 3.3.1 prior to 3.3.1.3, 3.3.2 prior to 3.3.2.2, and 3.4 prior to 3.4.0.1 allows remote authenticated users to inject arbitrary web script o...
Ibm Tririga Application Platform 3.2Ibm Tririga Application Platform 3.3.2.0Ibm Tririga Application Platform 3.3.2.1Ibm Tririga Application Platform 3.2.1Ibm Tririga Application Platform 3.3.0.0Ibm Tririga Application Platform 3.4.0.0Ibm Tririga Application Platform 3.3.0.1Ibm Tririga Application Platform 3.3.1.0Ibm Tririga Application Platform 3.3.1.1Ibm Tririga Application Platform 3.3.1.2
668
VMScore
CVE-2014-4840
IBM TRIRIGA Application Platform 3.2 and 3.3 prior to 3.3.0.2, 3.3.1 prior to 3.3.1.3, 3.3.2 prior to 3.3.2.2, and 3.4 prior to 3.4.0.1 allows remote malicious users to execute arbitrary code via a crafted URL.
Ibm Tririga Application Platform 3.3.1.0Ibm Tririga Application Platform 3.3.1.1Ibm Tririga Application Platform 3.3.1.2Ibm Tririga Application Platform 3.3.2.0Ibm Tririga Application Platform 3.3.2.1Ibm Tririga Application Platform 3.2Ibm Tririga Application Platform 3.2.1Ibm Tririga Application Platform 3.4.0.0Ibm Tririga Application Platform 3.3.0.0Ibm Tririga Application Platform 3.3.0.1
490
VMScore
CVE-2016-0300
IBM TRIRIGA Application Platform 3.3 prior to 3.3.2.6, 3.4 prior to 3.4.2.3, and 3.5 prior to 3.5.0.1 might allow remote malicious users to access arbitrary JSP pages via vectors related to improper input validation. IBM X-Force ID: 111412.
Ibm Tririga Application Platform 3.3.0.2Ibm Tririga Application Platform 3.3.1.1Ibm Tririga Application Platform 3.3.2.5Ibm Tririga Application Platform 3.4.1.1Ibm Tririga Application Platform 3.3.1.3Ibm Tririga Application Platform 3.3.2.0Ibm Tririga Application Platform 3.3.2.1Ibm Tririga Application Platform 3.3.2.3Ibm Tririga Application Platform 3.3.1.0Ibm Tririga Application Platform 3.3.1.2Ibm Tririga Application Platform 3.3.2.4Ibm Tririga Application Platform 3.4.0.0Ibm Tririga Application Platform 3.4.1.2Ibm Tririga Application Platform 3.5.0.0Ibm Tririga Application Platform 3.3.0.0Ibm Tririga Application Platform 3.3.0.1Ibm Tririga Application Platform 3.4.1.3Ibm Tririga Application Platform 3.4.2.0Ibm Tririga Application Platform 3.4.2.1Ibm Tririga Application Platform 3.4.2.2
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook