CVE-2016-2883

MEDIUM · 5.4 CVSS Gepubliceerd: 02-07-2016 CWE-79

Beschrijving

Cross-site scripting (XSS) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-0387.

Vendors

Ibm

Affected products

Tririga Application Platform

References

www-01.ibm.com