Skip to content
Sign in
7.1 High

CVE-2019-4208 IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 is vulnerable to an XML External Entity Injection (XXE) attack when…

Description

IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 159129.

Affected products and versions

Product Affected versions Fixed in
TRIRIGA Application Platform 3.6.0 No fix stated
TRIRIGA Application Platform 3.5.3 No fix stated

Other CVEs of TRIRIGA Application Platform

The 17 CVEs of TRIRIGA Application Platform →
CVE-2026-107400 IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary… 8.8 High CVE-2026-93891 IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive… 7.6 High CVE-2026-93892 IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive… 8.1 High CVE-2026-102627 IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary… 8.8 High
Track this CVE