CVEvulnerability
CVE-2013-6726
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-05-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in WebProcess.srv in IBM TRIRIGA Application Platform 3.2.x and 3.3.x before 3.3.1.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• ibm tririga application platform 3.2
• ibm tririga application platform 3.2.1
• ibm tririga application platform 3.3.0.0
• ibm tririga application platform 3.3.0.1
• ibm tririga application platform 3.3.1.0
• ibm tririga application platform 3.3.1.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21671968 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89281 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21671968 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89281 exchange.xforce.ibmcloud.com