Cross-Site Scripting Vulnerability in IBM QRadar Network Security
CVE-2020-4153
5.4MEDIUM
Summary
IBM QRadar Network Security versions 5.4.0 and 5.5.0 contain a cross-site scripting vulnerability that permits attackers to inject arbitrary JavaScript code into the Web UI. This unauthorized script execution can compromise user sessions and lead to the disclosure of sensitive credentials. Attackers utilizing this vulnerability can manipulate the web application’s intended functionality, thereby posing significant risks to the integrity and confidentiality of user data.
Affected Version(s)
QRadar Network Security 5.4.0
QRadar Network Security 5.5.0
References
CVSS V3.1
Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved