CVE-2014-4838

no score yetEPSS 0.9%

Cross-site scripting (XSS) vulnerability in GanttProjectSchedulerPopup.jsp in IBM TRIRIGA Application Platform 3.2 and 3.3 before 3.3.0.2, 3.3.1 before 3.3.1.3, 3.3.2 before 3.3.2.2, and 3.4 before 3.4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2014-10-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:tririga_application_platform

References

http://secunia.com/advisories/61056
http://www-01.ibm.com/support/docview.wss?uid=swg21686233
https://exchange.xforce.ibmcloud.com/vulnerabilities/95634
http://secunia.com/advisories/61056
http://www-01.ibm.com/support/docview.wss?uid=swg21686233

Check your stack JSON