CVE-2016-9737: IBM TRIRIGA 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting.

Security readout for executives and security teams

This issue lets a TRIRIGA user place JavaScript into the web interface, potentially changing what other trusted users see or do and exposing credentials within an active session. The public CVE data does not include CVSS scoring or detailed exploit conditions. Organizations running IBM TRIRIGA Application Platform versions listed in the CVE affected data may be exposed. The description specifically names 3.3, 3.4, and 3.5, while the affected list also includes 3.0 through 3.5.2 variants. Treat this as a moderate-priority application security issue if TRIRIGA is in use, especially for systems handling facilities, real estate, or operational data. Prioritize inventory and vendor-guided remediation because public severity details are incomplete. Mitigation focus: Identify all IBM TRIRIGA Application Platform versions in use.; Review IBM advisory 1996200 for vendor-approved fixes or workarounds.; Apply IBM-recommended updates or configuration changes where applicable..

Prepared

Jun 13, 2026, 05:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.