{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2013-04-08T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to inject content, and conduct phishing attacks, via vectors involving (1) the html/en/default/ directory, (2) birt/frameset, (3) WebProcess.srv, (4) sqa/html/en/default/reportTemplate/reportTemplateOrderCols.jsp, or (5) a/html/en/default/om2/omObjectFinder.jsp."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-28T12:57:01", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21628851"}, {"name": "tririga-content-spoofing(80629)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80629"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21628852"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@us.ibm.com", "ID": "CVE-2012-5949", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to inject content, and conduct phishing attacks, via vectors involving (1) the html/en/default/ directory, (2) birt/frameset, (3) WebProcess.srv, (4) sqa/html/en/default/reportTemplate/reportTemplateOrderCols.jsp, or (5) a/html/en/default/om2/omObjectFinder.jsp."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://www-01.ibm.com/support/docview.wss?uid=swg21628851", "refsource": "CONFIRM", "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21628851"}, {"name": "tririga-content-spoofing(80629)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80629"}, {"name": "http://www-01.ibm.com/support/docview.wss?uid=swg21628852", "refsource": "CONFIRM", "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21628852"}]}}}}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2012-5949", "datePublished": "2013-04-23T10:00:00", "dateReserved": "2012-11-21T00:00:00", "dateUpdated": "2017-08-28T12:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:tririga_application_platform:2.1:*:*:*:*:*:*:*", "matchCriteriaId": "B3ECDCA8-28FA-4A03-A51E-B8335B6AE9A1", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tririga_application_platform:2.5:*:*:*:*:*:*:*", "matchCriteriaId": "2DA2E984-DD46-4F16-849A-C6E488402E80", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tririga_application_platform:2.6:*:*:*:*:*:*:*", "matchCriteriaId": "8DF2E581-2EA5-41E2-9A13-CEC92AF70CDD", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tririga_application_platform:2.7:*:*:*:*:*:*:*", "matchCriteriaId": "AE66AD36-46F2-48A4-A9BB-C5E291C45884", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.0:*:*:*:*:*:*:*", "matchCriteriaId": "76EEEE27-65F4-4CF0-BE6E-1B95B63A913D", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.1:*:*:*:*:*:*:*", "matchCriteriaId": "B4EB23AD-8FCF-4E82-8B8D-183E13AC7BB8", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.2:*:*:*:*:*:*:*", "matchCriteriaId": "63B37387-4218-4B92-BD39-4EA5E849DB51", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "46D0A920-F5D2-4FB7-8EF1-E892B27F3158", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tririga_application_platform:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "B7D9417A-9A12-4D30-8204-ADECFB901142", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to inject content, and conduct phishing attacks, via vectors involving (1) the html/en/default/ directory, (2) birt/frameset, (3) WebProcess.srv, (4) sqa/html/en/default/reportTemplate/reportTemplateOrderCols.jsp, or (5) a/html/en/default/om2/omObjectFinder.jsp."}, {"lang": "es", "value": "Multiples vulnerabilidades de ejecuci\u00f3n de secuencias de comandos en sitios cruzados (XSS) en IBM TRIRIGA Application Platform v2.x y v3.x antes de v3.3, y v8, que permiten a atacantes remotos inyectar contenido, y llevar a cabo ataques de phishing, a trav\u00e9s de vectores relacionados con (1) el html/es/default/, (2) birt/frameset, (3) WebProcess.srv, (4) sqa/html/es/default/reportTemplate/reportTemplateOrderCols.jsp, o (5) a/html/en/default/om2/omObjectFinder.jsp."}], "id": "CVE-2012-5949", "lastModified": "2017-08-29T01:32:52.760", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2013-04-23T11:47:35.820", "references": [{"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21628851"}, {"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21628852"}, {"source": "psirt@us.ibm.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80629"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}