CVE-2016-0386

8.0 highEPSS 0.5%

Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to hijack the authentication of administrators for requests that delete employees.

Severity

CVSS 3.0

8.0 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2016-07-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:tririga_application_platform

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IV83657
http://www-01.ibm.com/support/docview.wss?uid=swg1IV83657

Check your stack JSON