TRIRIGA Application Platform vulnerabilities
6 known vulnerabilities in TRIRIGA Application Platform from IBM. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
TRIRIGA Application Platform: Improper Control of Generation of Code
IBM TRIRIGA Application Platform 5.0.0 through 5.0.9 IBM TRIRIGA could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
- 8.8 High severity
TRIRIGA Application Platform: Improper Authentication
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication.
- 8.1 High severity
TRIRIGA Application Platform: Exposure of Sensitive Information to an Unauthorized Actor
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.
- 7.6 High severity
TRIRIGA Application Platform: Improper Restriction of XML External Entity Reference
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
- 8.8 High severity
TRIRIGA Application Platform: Improper Limitation of a Pathname to a Restricted Directory
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of file paths during archive extraction.
- 7.1 High severity
TRIRIGA Application Platform: Improper Restriction of XML External Entity Reference
IBM TRIRIGA 4.0 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 249975.