CVSS 5.4 · Medium EPSS 0,18%
Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada ibm qradar security information and event manager. Skor CVSS 3.1 5.4 (Medium) menurut NVD.
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| ibm | qradar security information and event manager | Versi 7.5.0 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_1 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_10 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_11 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_12 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_13 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_13_interim_fix_01 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_13_interim_fix_02 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_2 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_3 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_4 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_5 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_6 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_7 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_8 |
| ibm | qradar security information and event manager | Versi 7.5.0 update_pack_9 |