Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:tririga_application_platform:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductTririga Application Platform (38cf69db-e5ba-5d97-aba2-671e0ccdabda)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-27876 vulnerable 2026-06-08 05:57:42.364533 IBM TRIRIGA Application Platform XML external entity injection
HIGH (7.1)
IBM TRIRIGA 4.0 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 249975.
Published: 2023-04-07T13:19:32.681Z
Updated: 2025-02-10T15:21:41.965Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43914 vulnerable 2026-06-08 05:49:34.977930 IBM TRIRIGA Application Platform cross-site scripting
MEDIUM (4.6)
IBM TRIRIGA Application Platform 4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 241036.
Published: 2023-04-07T13:26:55.076Z
Updated: 2025-02-10T15:21:23.090Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4868 vulnerable 2026-06-08 05:26:41.112134 IBM TRIRIGA information disclosure
MEDIUM (4.3)
IBM TRIRIGA 3.0, 4.0, and 4.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 190744.
Published: 2023-07-31T01:37:47.641Z
Updated: 2024-10-11T14:08:10.928Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4277 vulnerable 2026-06-08 05:25:59.082034 Details available
MEDIUM (5.3)
IBM TRIRIGA Application Platform 3.5.3 and 3.6.1 discloses sensitive information in error messages that could aid an attacker formulate future attacks. IBM X-Force ID: 175993.
Published: 2020-04-17T13:25:27.100Z
Updated: 2024-09-17T04:09:25.828Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4208 vulnerable 2026-06-08 05:13:56.939230 Details available
HIGH (7.1)
IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 159129.
Published: 2019-05-07T18:35:20.860Z
Updated: 2024-09-17T02:31:18.798Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4207 vulnerable 2026-06-08 05:13:56.938794 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-2008 vulnerable 2026-06-08 05:11:29.916219 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1465 vulnerable 2026-06-08 05:09:22.229284 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1374 vulnerable 2026-06-08 05:09:21.936692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1373 vulnerable 2026-06-08 05:09:21.935309 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1372 vulnerable 2026-06-08 05:09:21.933523 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1371 vulnerable 2026-06-08 05:09:21.925036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0345 vulnerable 2026-06-08 05:07:15.026643 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0344 vulnerable 2026-06-08 05:07:15.026313 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0343 vulnerable 2026-06-08 05:07:15.025981 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0342 vulnerable 2026-06-08 05:07:15.025611 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0312 vulnerable 2026-06-08 05:07:14.962279 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0299 vulnerable 2026-06-08 05:07:14.908238 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4003 vulnerable 2026-06-08 05:04:33.502001 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.