medium4.3
CVE-2012-5948
Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to inject arbitra…
Impact
Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) WebProcess.srv, (2) the html/en/default/ directory, (3) Widget/resource, (4) birt/frameset, or (5) ganttlib/gantt-jws.jnlp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Tririga Application Platform | Versions 2.1, 2.5, 2.6, 2.7, 3.0, 3.1 |