Skip to content
Sign in
7.1 High

CVE-2023-27876 IBM TRIRIGA 4.0 is vulnerable to an XML external entity injection (XXE) attack when processing XML data

Description

IBM TRIRIGA 4.0 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 249975.

Affected products and versions

Product Affected versions Fixed in
TRIRIGA Application Platform 4.0 No fix stated

Other CVEs of TRIRIGA Application Platform

The 17 CVEs of TRIRIGA Application Platform →
CVE-2026-107400 IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary… 8.8 High CVE-2026-93891 IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive… 7.6 High CVE-2026-93892 IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive… 8.1 High CVE-2026-102627 IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary… 8.8 High
Track this CVE