CVE-2017-1372

Summary

IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126865.

Affected Software

VendorProductVersion RangeStatus
IBMTRIRIGA Application Platform3.3affected
IBMTRIRIGA Application Platform3.3.1affected
IBMTRIRIGA Application Platform3.3.2affected
IBMTRIRIGA Application Platform3.4affected
IBMTRIRIGA Application Platform3.4.1affected
IBMTRIRIGA Application Platform3.4.2affected
IBMTRIRIGA Application Platform3.5affected
IBMTRIRIGA Application Platform3.5.1affected
IBMTRIRIGA Application Platform3.5.2affected

Weaknesses

  • Cross-Site Scripting

ADP Enrichment

CVE Program Container

Additional References

References