Page 2 of 39 results (0.007 seconds)

CVSS: 4.3EPSS: 0%CPEs: 3EXPL: 0

CVE-2016-0345

https://notcve.org/view.php?id=CVE-2016-0345

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to obtain the installation path via vectors involving Birt report rendering. IBM X-Force ID: 111786. IBM TRIRIGA Application Platform, en versiones 3.3 anteriores a la 3.3.2.6, versiones 3.4 anteriores a la 3.4.2.3 y versiones 3.5 anteriores a la 3.5.0.1, permite que usuarios autenticados remotos obtengan la ruta de instalación mediante vectores relacionados con la representación de informes Birt. IBM X-Force ID: 111786. • http://exchange.xforce.ibmcloud.com/vulnerabilities/111786 http://www-01.ibm.com/support/docview.wss?uid=swg21980233 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2016-0312

https://notcve.org/view.php?id=CVE-2016-0312

IBM TRIRIGA Application Platform before 3.3.2 allows remote attackers to obtain sensitive information via vectors related to granting unauthenticated access to Document Manager. IBM X-Force ID: 111486. IBM TRIRIGA Application Platform en versiones anteriores a la 3.3.2 permite que los atacantes remotos obtengan información sensible mediante vectores relacionados con la concesión de acceso no autenticado a Document Manager. IBM X-Force ID: 111486. • http://www-01.ibm.com/support/docview.wss?uid=swg21979762 https://exchange.xforce.ibmcloud.com/vulnerabilities/111486 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 5.5EPSS: 0%CPEs: 20EXPL: 0

CVE-2016-0300

https://notcve.org/view.php?id=CVE-2016-0300

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 might allow remote attackers to access arbitrary JSP pages via vectors related to improper input validation. IBM X-Force ID: 111412. IBM TRIRIGA Application Platform, en versiones 3.3 anteriores a 3.3.2.6; versiones 3.4 anteriores a la 3.4.2.3 y versiones 3.5 anteriores a la 3.5.0.1, podría permitir que atacantes remotos accedan a páginas JSP arbitrarias mediante vectores relacionados con la validación incorrecta de entradas. IBM X-Force ID: 111412. • http://www-01.ibm.com/support/docview.wss?uid=swg21979760 https://exchange.xforce.ibmcloud.com/vulnerabilities/111412 • CWE-20: Improper Input Validation •

CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0

CVE-2016-0342

https://notcve.org/view.php?id=CVE-2016-0342

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to read or modify arbitrary reports by leveraging an incorrect grant of access. IBM X-Force ID: 111783. IBM TRIRIGA Application Platform en versiones 3.3 anteriores a la 3.3.2.6, 3.4 anteriores a la 3.4.2.3 y 3.5 anteriores a la 3.5.0.1 permite que los usuarios autenticados remotos lean o modifiquen informes arbitrarios aprovechándose de una concesión incorrecta de acceso. IBM X-Force ID: 111783. • http://www-01.ibm.com/support/docview.wss?uid=swg21980252 https://exchange.xforce.ibmcloud.com/vulnerabilities/111783 • CWE-284: Improper Access Control •

CVSS: 5.4EPSS: 0%CPEs: 37EXPL: 0

CVE-2017-1465

https://notcve.org/view.php?id=CVE-2017-1465

IBM TRIRIGA 3.2, 3.3, 3.4, and 3.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 128464. IBM TRIRIGA 3.2, 3.3, 3.4 y 3.5 podría permitir que un atacante remoto realizase un secuestro de clic a la víctima. Al persuadir a una víctima para que visite un sitio web malicioso, un atacante remoto podría explotar esta vulnerabilidad para secuestrar las acciones de clic de la víctima y, probablemente, lanzar más ataques contra esta. • http://www.ibm.com/support/docview.wss?uid=swg22006184 https://exchange.xforce.ibmcloud.com/vulnerabilities/128464 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •