CVE-2012-5949

IBM TRIRIGA Application Platform 2.x-3.x < 3.3 and 8 - Cross-Site Scripting via Multiple Vectors

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to inject content, and conduct phishing attacks, via vectors involving (1) the html/en/default/ directory, (2) birt/frameset, (3) WebProcess.srv, (4) sqa/html/en/default/reportTemplate/reportTemplateOrderCols.jsp, or (5) a/html/en/default/om2/omObjectFinder.jsp.

References (3)

Core 3
Core References
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21628851
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/80629
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21628852

Scores

EPSS 0.0115
EPSS Percentile 63.5%

Details

CWE
CWE-79
Status published
Products (9)
ibm/tririga_application_platform 2.1
ibm/tririga_application_platform 2.5
ibm/tririga_application_platform 2.6
ibm/tririga_application_platform 2.7
ibm/tririga_application_platform 3.0
ibm/tririga_application_platform 3.1
ibm/tririga_application_platform 3.2
ibm/tririga_application_platform 3.2.1
ibm/tririga_application_platform 8.0
Published Apr 23, 2013
Tracked Since Feb 18, 2026