Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:tririga_application_platform:3.1:*:*:*:*:*:*:*

part: a version: 3.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductTririga Application Platform (38cf69db-e5ba-5d97-aba2-671e0ccdabda)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-4003 vulnerable 2026-06-08 05:04:33.505081 Details available
Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3.1.1, and 8, allow remote authenticated users to inject arbitrary web script or HTML via (1) unspecified input to WebProcess.srv, (2) unspecified input to html/en/default/actionHandler/queryHandler.jsp, or (3) unspecified input in a portalSectionId action to html/en/default/reportTemplate/hGridTopQuery.jsp.
Published: 2013-08-29T10:00:00.000Z
Updated: 2024-08-06T16:30:49.464Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5950 vulnerable 2026-06-08 05:02:58.787508 Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to hijack the authentication of arbitrary users for requests that modify data records via vectors involving (1) the html/en/default/ directory or (2) sqa/html/en/default/process/comm/saveProps.jsp.
Published: 2013-04-23T10:00:00.000Z
Updated: 2024-08-06T21:21:28.167Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5949 vulnerable 2026-06-08 05:02:58.787026 Details available
Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to inject content, and conduct phishing attacks, via vectors involving (1) the html/en/default/ directory, (2) birt/frameset, (3) WebProcess.srv, (4) sqa/html/en/default/reportTemplate/reportTemplateOrderCols.jsp, or (5) a/html/en/default/om2/omObjectFinder.jsp.
Published: 2013-04-23T10:00:00.000Z
Updated: 2024-08-06T21:21:27.879Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5948 vulnerable 2026-06-08 05:02:58.784502 Details available
Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) WebProcess.srv, (2) the html/en/default/ directory, (3) Widget/resource, (4) birt/frameset, or (5) ganttlib/gantt-jws.jnlp.
Published: 2013-04-23T10:00:00.000Z
Updated: 2024-08-06T21:21:28.242Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.