Medium severity · published Feb 21, 2018
CVE-2016-0345
IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to obtain the installation path via vectors…
4.3
CVSS
0.9%
EPSS
No
On KEV
Description
IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to obtain the installation path via vectors involving Birt report rendering. IBM X-Force ID: 111786.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TA
Tririga Application Platform · Ibm
3.3.0.0 before 3.3.2.6; 3.4.0.0 before 3.4.2.3; 3.5.0.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-0345
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-0345
VDB Entry
http://exchange.xforce.ibmcloud.com/vulnerabilities/111786
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21980233
More from Tririga Application Platform
8.8
CVE-2026-107400
Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication
8.8
CVE-2026-102627
Security Vulnerability identified in IBM TRIRIGA - Zip Slip
8.8
CVE-2017-1373
Reports executed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute a report they do not have…
8.8
CVE-2017-1371
Builder tools running in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute Builder tool actions…
8.8
CVE-2017-1153
IBM TRIRIGA Report Manager 3.2 through 3.5 contains a vulnerability that could allow an authenticated user to execute actions that they do not have access to