Cross-Site Scripting Vulnerability in IBM QRadar Network Security
CVE-2020-4153

5.4MEDIUM

Key Information:

Vendor

IBM
Status
Qradar Network Security
Vendor
CVE Published:
8 November 2021

What is CVE-2020-4153?

IBM QRadar Network Security versions 5.4.0 and 5.5.0 contain a cross-site scripting vulnerability that permits attackers to inject arbitrary JavaScript code into the Web UI. This unauthorized script execution can compromise user sessions and lead to the disclosure of sensitive credentials. Attackers utilizing this vulnerability can manipulate the web application’s intended functionality, thereby posing significant risks to the integrity and confidentiality of user data.

Affected Version(s)

QRadar Network Security 5.4.0

QRadar Network Security 5.5.0

References

https://www.ibm.com/support/pages/node/6514403
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/174269
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.