CVE-2017-1372

IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126865.

• CWE-79

• http://www.ibm.com/support/docview.wss?uid=swg22004675Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/126865VDB Entry, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=swg22004675Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/126865VDB Entry, Vendor Advisory

Published

Jul 21, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-13713T&W WIFI Repeater BE126 allows remote authenticated users to…
• CVE-2017-13715The __skb_flow_dissect function in net/core/flow_dissector.c…9.8
• CVE-2017-13716The C++ symbol demangler routine in cplus-dem.c in libiberty…
• CVE-2017-13717Starry Station (aka Starry Router) sets the Access-Control-A…
• CVE-2017-13718The HTTP API supported by Starry Station (aka Starry Router)…
• CVE-2017-13719The Amcrest IPM-721S Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R…
• CVE-2017-13720In the PatternMatch function in fontfile/fontdir.c in libXfo…
• CVE-2017-13721In X.Org Server (aka xserver and xorg-server) before 1.19.4,…
• CVE-2017-13722In the pcfGetProperties function in bitmap/pcfread.c in libX…
• CVE-2017-13723In X.Org Server (aka xserver and xorg-server) before 1.19.4,…
• CVE-2017-13724On the Axesstel MU553S MU55XS-V1.14, there is a Stored Cross…
• CVE-2017-13725The IPv6 routing header parser in tcpdump before 4.9.2 has a…9.8