Known vulnerabilities in IBM TRIRIGA Application Platform

Known vulnerabilities in IBM TRIRIGA Application Platform

Vendor: IBM Corporation

Software: IBM TRIRIGA Application Platform

Software CPE: cpe:2.3:a:ibm_corporation:ibm_tririga_application_platform:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 16

Public exploits: 1

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (16)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU82363 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2023-27876	CWE-611	Medium	No	No	-	25.10.2023	SB2023102525
#VU82361 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-43914	CWE-79	Low	No	No	4.0.0.3	25.10.2023	SB2023102523
#VU81911 - Improper input validation CVE-2014-0359	CWE-20	Medium	No	No	4.5	11.10.2023	SB2023101165
#VU78906 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-24620	CWE-79	Medium	No	No	4.5	03.08.2023	SB2023080312
#VU78905 - Exposure of sensitive information to an unauthorized actor CVE-2020-4868	CWE-200	Low	No	No	4.5	03.08.2023	SB2023080311
#VU78904 - Improper input validation CVE-2017-4015	CWE-20	Low	No	No	4.5	03.08.2023	SB2023080310
#VU65835 - Incorrect Regular Expression CVE-2022-31129	CWE-185	Medium	No	No	4.5	27.07.2022	SB2022072729 SB2022072901 SB2022081048 and 102 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-23437	CWE-835	Medium	No	No	4.5	25.01.2022	SB2022012503 SB2022041946 SB2022042249 and 92 more
#VU59717 - Improper input validation CVE-2019-10219	CWE-20	Medium	No	No	3.6.1.3, 3.7.0.1, 3.8.0.1, 4.0.2, 4.1.1	18.01.2022	SB2022011837 SB2022070611 SB2022083134 and 4 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-45105	CWE-835	Medium	Available	No	-	18.12.2021	SB2021121802 SB2021121903 SB2021122011 and 169 more
#VU58816 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44228	CWE-94	Critical	Available	Exploited	-	10.12.2021	SB2021121003 SB2021121101 SB2021121201 and 338 more
#VU56019 - Resource exhaustion CVE-2021-30468	CWE-400	Medium	No	No	3.6.1.3, 3.7.0.1, 3.8.0.1, 4.0.2, 4.1.1	20.08.2021	SB2021082016 SB2021101933 SB2022042254 and 8 more
#VU54291 - Server-Side Request Forgery (SSRF) CVE-2020-11988	CWE-918	Medium	No	No	4.5	21.06.2021	SB2021062143 SB2021062144 SB2021062145 and 15 more
#VU47481 - Improper input validation CVE-2020-13956	CWE-20	Medium	No	No	3.6.1.3, 3.7.0.1, 3.8.0.1, 4.0.2, 4.1.1	09.10.2020	SB2020100902 SB2020101604 SB2021042104 and 77 more
#VU26530 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2020-1954	CWE-300	Low	No	No	3.6.1.3, 3.7.0.1, 3.8.0.1, 4.0.2, 4.1.1	02.04.2020	SB2020040206 SB2020102703 SB2020102832 and 8 more
#VU14515 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2018-1000632	CWE-611	Low	No	No	3.6.1.3, 3.7.0.1, 3.8.0.1, 4.0.2, 4.1.1	21.08.2018	SB2018082321 SB2018120722 SB2018121006 and 20 more