CVE-2017-1465
Estado: ModificadaMedia (5.4)—
IBM TRIRIGA 3.2, 3.3, 3.4, and 3.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 128464.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- Puntuación base: 5.4
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.61%
- Percentil entre todas las CVEs puntuadas: 48
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-79
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2017-1465",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 3.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
"authentication": "SINGLE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 6.8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "CHANGED",
"version": "3.0",
"baseScore": 5.4,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"integrityImpact": "LOW",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "LOW"
},
"impactScore": 2.7,
"exploitabilityScore": 2.3
}
]
},
"affected": [
{
"source": "psirt@us.ibm.com",
"affectedData": [
{
"vendor": "IBM",
"product": "TRIRIGA Application Platform",
"versions": [
{
"status": "affected",
"version": "3.3"
},
{
"status": "affected",
"version": "3.3.1"
},
{
"status": "affected",
"version": "3.3.2"
},
{
"status": "affected",
"version": "3.4"
},
{
"status": "affected",
"version": "3.4.1"
},
{
"status": "affected",
"version": "3.4.2"
},
{
"status": "affected",
"version": "3.5"
},
{
"status": "affected",
"version": "3.5.1"
},
{
"status": "affected",
"version": "3.5.2"
}
]
}
]
}
],
"published": "2017-12-07T15:29:00.937",
"references": [
{
"url": "http://www.ibm.com/support/docview.wss?uid=swg22006184",
"tags": [
"Issue Tracking",
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/128464",
"tags": [
"Issue Tracking",
"VDB Entry",
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=swg22006184",
"tags": [
"Issue Tracking",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/128464",
"tags": [
"Issue Tracking",
"VDB Entry",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "IBM TRIRIGA 3.2, 3.3, 3.4, and 3.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 128464."
},
{
"lang": "es",
"value": "IBM TRIRIGA 3.2, 3.3, 3.4 y 3.5 podría permitir que un atacante remoto realizase un secuestro de clic a la víctima. Al persuadir a una víctima para que visite un sitio web malicioso, un atacante remoto podría explotar esta vulnerabilidad para secuestrar las acciones de clic de la víctima y, probablemente, lanzar más ataques contra esta. IBM X-Force ID: 128464."
}
],
"lastModified": "2026-06-17T01:14:25.840",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6282A028-3DB7-4CE3-8479-2B254EE20C61"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D387C439-0C1C-4419-9115-F830414AC6D1"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.3.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A44316ED-571F-4E4B-BC02-CED0E09D175E"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B422964C-DAC7-4896-9368-AFDC6BE64F87"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "31E156E1-EA1D-463B-AC55-964D1897BB12"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E0AC53E-0F04-4F25-9F9C-AFF998C1CEB1"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.3.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "648D0E41-BA9F-4798-A5E4-413F7D895B7C"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "110B75DA-3B5D-4B2A-A243-C02F04A69DD8"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3CFF6D9D-633A-414B-9A81-9627F1006F99"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "97EB5F4E-24BB-4F17-80B1-963DBC66E44D"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2FAD7EB7-9157-4FA1-822D-C5C704136FD1"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "59161DED-CC0F-4BD2-BCAD-6D3E766FAB8F"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.3.2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A818249-26BA-4575-9805-3AC8C038B25B"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.4.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC985F26-E915-49CA-951A-7E3FE59E5377"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.4.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4271E1DA-B047-4C91-93D6-EF5A9EE9AC51"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "27D8FE59-90C3-4EE3-BA70-01C71DCC27B0"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3DD18A13-F399-4E83-9976-B7C6FB41B236"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D0F8B24-227A-42F2-A6FC-03AFB588CCCE"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.4.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0E748299-7540-4141-B5DC-97C5C18FF162"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "13E00EA8-D6B3-464A-A7E8-F186FE4A3DB1"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "00554970-B211-438A-A51C-5CF618431886"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78DD7794-25C5-4C04-9CFD-4CA9EAA4CA2A"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "220168B8-68E8-45CA-A351-7A07415495CD"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B392C124-E469-4955-B11E-8B281557C43A"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.4.2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D83F93CE-B0E1-4904-8051-67A18692CB90"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CE1B5398-7C51-4834-AB7A-F284C23C95FC"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "627B09F8-666C-4D29-B415-7488DC54CD06"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.5.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "30F2D08F-E531-4E5B-94B9-3EFF5869FAC6"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EFFAC901-11B6-4754-A4FB-955CAB39D938"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "60154DE9-997F-4ABD-8E22-A8D006FB6931"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F536558A-18B4-44C6-8921-4BE3C385CCE3"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.5.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F3C78ED-A345-4199-813A-EDD7BD1F09DA"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD95904E-647A-499E-AE3C-E742BAE1EED2"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.5.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "349582F6-EBBA-4AA8-88F4-A708A1472859"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.5.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "679228D7-1FF0-44E9-AB51-A3436CC550AB"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.5.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA5C5243-DEA5-453B-BD7E-4561A5F012A6"
},
{
"criteria": "cpe:2.3:a:ibm:tririga_application_platform:3.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1CE6DEDE-0FC4-4264-8B83-5B6E564D41AF"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@us.ibm.com"
}