CVSS 5.4 · Medium EPSS 0,21%
Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada ibm qradar security information and event manager. Skor CVSS 3.1 5.4 (Medium) menurut NVD.
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 12 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| ibm | qradar security information and event manager | Versi 7.5.0 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_1 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_10 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_11 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_12 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_2 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_3 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_4 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_5 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_6 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_7 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_8 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_9 |