Cross-site Scripting Vulnerability in IBM TRIRIGA Application Platform
CVE-2016-0344

5.4MEDIUM

Key Information:

Vendor

IBM
Status
Tririga Application Platform
Vendor
CVE Published:
21 February 2018

What is CVE-2016-0344?

A cross-site scripting (XSS) vulnerability exists in the My Reports component of the IBM TRIRIGA Application Platform. This flaw, affecting multiple versions, enables remote attackers to inject arbitrary web scripts or HTML through various unspecified vectors. Exploitation of this vulnerability could lead to unauthorized access, exposing users to various security risks. Organizations using affected versions should apply necessary patches to mitigate potential threats.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21980234
x_refsource_CONFIRM
http://exchange.xforce.ibmcloud.com/vulnerabilities/111785
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.