CVE-2026-93891: Security Vulnerability identified in IBM TRIRIGA - XXE
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
Other sources
IBM TRIRIGA could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM TRIRIGA Application Platformto a version that resolves this vulnerability.Fixed in 5.0.9
Event History
Frequently Asked Questions
Which deployments are affected?
IBM TRIRIGA Application Platform versions 5.0.0 through 5.0.8 are affected.
What level of access does an attacker need?
An attacker must be remote and authenticated. The supplied severity vector indicates high privileges are required, and no user interaction is required.
What could exploitation allow?
Successful XXE exploitation could allow an authenticated attacker to obtain sensitive information. The severity vector also indicates an availability impact and a changed scope.