CVE-2012-5948
Estado: ModificadaMedia (4.3)—
Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) WebProcess.srv, (2) the html/en/default/ directory, (3) Widget/resource, (4) birt/frameset, or (5) ganttlib/gantt-jws.jnlp.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
- Puntuación base: 4.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.93%
- Percentil entre todas las CVEs puntuadas: 59
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-79
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2012-5948",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "psirt@us.ibm.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2013-04-23T11:47:35.740",
"references": [
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21628847",
"tags": [
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80628",
"source": "psirt@us.ibm.com"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21628847",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80628",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) WebProcess.srv, (2) the html/en/default/ directory, (3) Widget/resource, (4) birt/frameset, or (5) ganttlib/gantt-jws.jnlp."
},
{
"lang": "es",
"value": "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en IBM TRIRIGA Application Platform v2.x y v3.x antes de v3.3, y 8, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores relacionados (1) WebProcess.srv, (2) el html/es/default/, (3) Widget/recurso, (4) birt/conjunto de marcos, o (5) ganttlib/gantt-jws.jnlp."
}
],
"lastModified": "2026-06-16T23:47:36.980",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3ECDCA8-28FA-4A03-A51E-B8335B6AE9A1"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2DA2E984-DD46-4F16-849A-C6E488402E80"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:2.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8DF2E581-2EA5-41E2-9A13-CEC92AF70CDD"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:2.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE66AD36-46F2-48A4-A9BB-C5E291C45884"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "76EEEE27-65F4-4CF0-BE6E-1B95B63A913D"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B4EB23AD-8FCF-4E82-8B8D-183E13AC7BB8"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63B37387-4218-4B92-BD39-4EA5E849DB51"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "46D0A920-F5D2-4FB7-8EF1-E892B27F3158"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B7D9417A-9A12-4D30-8204-ADECFB901142"
}
],
"operator": "OR"
}
]
}
],
"evaluatorComment": "Per http://www-01.ibm.com/support/docview.wss?uid=swg21628847 \"The following versions are affected. IBM TRIRIGA Application Platform 3.3 is not impacted.\r\n· IBM TRIRIGA Application Platform 3.2.1 and fix packs\r\n· IBM TRIRIGA Application Platform 3.2 and fix packs\r\n· TRIRIGA Application Platform 3.1 and fix packs\r\n· TRIRIGA Application Platform 3.0 and fix packs\r\n· TRIRIGA Application Platform 2.7 and fix packs\r\n· TRIRIGA Application Platform 2.6 and fix packs\r\n· TRIRIGA Application Platform 2.5 and fix packs\r\n· TRIRIGA Application Platform 2.1 and fix packs\r\n· TRIRIGA Application Platform 8 and fix packs\"",
"sourceIdentifier": "psirt@us.ibm.com"
}