CVE-2016-0300 in TRIRIGA Application Platform

Summary

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 might allow remote attackers to access arbitrary JSP pages via vectors related to improper input validation. IBM X-Force ID: 111412.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 12/08/2015
• Disclosure: 02/02/2018
• Moderation: VulDB entry created
• Entries: VDB-112795 (1)
• CPE: ready
• CWE: CWE-20 (Confirmed)
• CVSS: 5.9
• EPSS: 0.00138
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-0300
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-0300
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-0300/