CVE-2016-0299

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote attackers to obtain sensitive information via vectors involving a database query. IBM X-Force ID: 111382.

• CWE-200

• http://www-01.ibm.com/support/docview.wss?uid=swg21981155Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/111382VDB Entry, Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21981155Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/111382VDB Entry, Vendor Advisory

Published

Feb 28, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-0292WebReports in IBM BigFix Platform (formerly Tivoli Endpoint …
• CVE-2016-0293Cross-site scripting (XSS) vulnerability in IBM BigFix Platf…
• CVE-2016-0295Cross-site request forgery (CSRF) vulnerability in the IBM B…
• CVE-2016-0296IBM Tivoli Endpoint Manager - Mobile Device Management (MDM)…
• CVE-2016-0297IBM Tivoli Endpoint Manager - Mobile Device Management (MDM)…
• CVE-2016-0298Directory traversal vulnerability in IBM Security Guardium D…
• CVE-2016-0300IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 bef…
• CVE-2016-0301Heap-based buffer overflow in the KeyView PDF filter in IBM …
• CVE-2016-0303Cross-site scripting (XSS) vulnerability in IBM Tivoli Integ…
• CVE-2016-0304The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 a…
• CVE-2016-0305IBM Connections is vulnerable to cross-site scripting, cause…
• CVE-2016-0306IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.41, …