CVE-2012-5948

IBM TRIRIGA Application Platform 2.x-3.x<3.3 and 8 - Cross-Site Scripting via Multiple Vectors

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) WebProcess.srv, (2) the html/en/default/ directory, (3) Widget/resource, (4) birt/frameset, or (5) ganttlib/gantt-jws.jnlp.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21628847
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/80628

Scores

EPSS 0.0093
EPSS Percentile 57.0%

Details

CWE
CWE-79
Status published
Products (9)
ibm/tririga_application_platform 2.1
ibm/tririga_application_platform 2.5
ibm/tririga_application_platform 2.6
ibm/tririga_application_platform 2.7
ibm/tririga_application_platform 3.0
ibm/tririga_application_platform 3.1
ibm/tririga_application_platform 3.2
ibm/tririga_application_platform 3.2.1
ibm/tririga_application_platform 8.0
Published Apr 23, 2013
Tracked Since Feb 18, 2026