Skip to content
Sign in
Not rated

CVE-2017-1372 IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting

Description

IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126865.

Affected products and versions

Product Affected versions Fixed in
TRIRIGA Application Platform 3.5 3.5 → 3.5.2 No fix stated
TRIRIGA Application Platform 3.4 3.4 → 3.4.2 No fix stated
TRIRIGA Application Platform 3.3 3.3 → 3.3.2 No fix stated

Other CVEs of TRIRIGA Application Platform

The 17 CVEs of TRIRIGA Application Platform →
CVE-2026-107400 IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary… 8.8 High CVE-2026-93891 IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive… 7.6 High CVE-2026-93892 IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive… 8.1 High CVE-2026-102627 IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary… 8.8 High
Track this CVE