CVE-2016-0344 Cross-site scripting (XSS) vulnerability in the My Reports component in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote attackers to injec...
MediumCVSS 5.4
EPSS 0.64%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the My Reports component in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 111785.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm tririga application platform | >= 3.3.0.0, < 3.3.2.6 | 3.3.2.6 |
| ibm tririga application platform | >= 3.4.0.0, <= 3.4.2.3 | No fix listed |
| ibm tririga application platform | = 3.5.0.0 | No fix listed |
References
- ibm-tririga-cve20160344-xss(111785) vdb-entry vendor-advisory
- www-01.ibm.com vendor-advisory