IBM QRadar SIEM 7.5 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
2025-02-14T17:15:16.420
2025-03-03T17:09:36.020
Analyzed
CVSSv3.1: 4.8 (MEDIUM)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | ibm | qradar_security_information_and_event_manager | 7.5.0 | Yes |
Application | ibm | qradar_security_information_and_event_manager | 7.5.0 | Yes |
Application | ibm | qradar_security_information_and_event_manager | 7.5.0 | Yes |
Application | ibm | qradar_security_information_and_event_manager | 7.5.0 | Yes |
Application | ibm | qradar_security_information_and_event_manager | 7.5.0 | Yes |
Application | ibm | qradar_security_information_and_event_manager | 7.5.0 | Yes |
Application | ibm | qradar_security_information_and_event_manager | 7.5.0 | Yes |
Application | ibm | qradar_security_information_and_event_manager | 7.5.0 | Yes |
Application | ibm | qradar_security_information_and_event_manager | 7.5.0 | Yes |
Application | ibm | qradar_security_information_and_event_manager | 7.5.0 | Yes |
Application | ibm | qradar_security_information_and_event_manager | 7.5.0 | Yes |
Application | ibm | qradar_security_information_and_event_manager | 7.5.0 | Yes |