Known vulnerabilities in IBM TRIRIGA

Known vulnerabilities in IBM TRIRIGA

Vendor: IBM Corporation

Software: IBM TRIRIGA

Software CPE: cpe:2.3:a:ibm_corporation:ibm_tririga:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 10

Public exploits: 1

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (10)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU83226 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2020-35460	CWE-22	Medium	No	No	3.6.1.3, 3.7.0.1, 3.8.0.1, 4.0.2, 4.1.1	16.11.2023	SB2020121577 SB2023111637 SB2025011715
#VU80741 - Improper Certificate Validation CVE-2012-5783	CWE-295	Medium	No	No	3.6.1.3, 3.7.0.1, 3.8.0.1, 4.0.2, 4.1.1	13.09.2023	SB2023091335 SB2023091521 SB2023092013 and 20 more
#VU78909 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-41086	CWE-79	Medium	No	No	4.5	03.08.2023	SB2023080316
#VU78899 - Exposure of sensitive information to an unauthorized actor CVE-2016-0248	CWE-200	Low	No	No	3.6.1.3, 3.7.0.1, 3.8.0.1, 4.0.2, 4.1.1	03.08.2023	SB2023080305
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-45105	CWE-835	Medium	Available	No	-	18.12.2021	SB2021121802 SB2021121903 SB2021122011 and 169 more
#VU58816 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44228	CWE-94	Critical	Available	Exploited	-	10.12.2021	SB2021121003 SB2021121101 SB2021121201 and 338 more
#VU49740 - Improper input validation CVE-2020-25020	CWE-20	High	No	No	3.6.1.3, 3.7.0.1, 3.8.0.1, 4.0.2, 4.1.1	20.01.2021	SB2021012017 SB2023111637 SB2025011715
#VU47481 - Improper input validation CVE-2020-13956	CWE-20	Medium	No	No	3.6.1.3, 3.7.0.1, 3.8.0.1, 4.0.2, 4.1.1	09.10.2020	SB2020100902 SB2020101604 SB2021042104 and 77 more
#VU12312 - Deserialization of Untrusted Data CVE-2016-1000031	CWE-502	High	No	No	3.6.1.3, 3.7.0.1, 3.8.0.1, 4.0.2, 4.1.1	01.05.2018	SB2017111432 SB2018110601 SB2019051512 and 39 more
#VU4212 - Memory corruption CVE-2016-0003	CWE-119	High	No	No	3.6.1.3, 3.7.0.1, 3.8.0.1, 4.0.2, 4.1.1	12.01.2016	SB2016011206 SB2023080305