IBM QRadar Suite Software Vulnerable to Stored Cross-Site Scripting

CVE-2023-47731

5.4MEDIUM

Key Information

Vendor
IBM
Status
Qradar Suite Software
Cloud Pak For Security
Vendor
CVE Published:
23 April 2024

Badges

đź“° News Worthy

Summary

IBM QRadar Suite Software 1.10.12.0 through 1.10.19.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 272203.

Affected Version(s)

QRadar Suite Software <= 1.10.19.0

Cloud Pak for Security <= 1.10.11.0

News Articles

favicon imageCybersecurityNews

IBM QRadar XSS Flaw Let Attackers Arbitrary JavaScript Code

A significant vulnerability was detected in IBM QRadar Suite Software and Cloud Pak for Security that allows attackers to execute arbitrary

8 months ago

Refferences

https://https://www.ibm.com/support/pages/node/7148994
vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/272203
vdb-entry

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • First article discovered by CybersecurityNews

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database1 News Article(s)

Credit

Vincent Dragnea
.