Ibm Tririga Application Platform vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ibm Tririga Application Platform: 4 record(s), with affected versions and fixes.
cpe:2.3:a:ibm:tririga_application_platform

CVE-2026-93892 High · 8.1 CWE-200 Oct 12, 2026

Security Vulnerability identified in IBM TRIRIGA - Information Disclosure in Admin Console

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.

CVE-2026-93891 High · 7.6 CWE-611 Oct 12, 2026

Security Vulnerability identified in IBM TRIRIGA - XXE

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.

CVE-2026-102627 High · 8.8 CWE-22 Oct 12, 2026

Security Vulnerability identified in IBM TRIRIGA - Zip Slip

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of file paths during archive extraction.

CVE-2026-11372 Medium · 5.4 CWE-79 Jun 22, 2026

IBM TRIRIGA Cross-Site Scripting Vulnerability

IBM TRIRIGA Application Platform 5.0.2 through 5.0.3 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.