IBM Security Bulletin: IBM QRadar SIEM is vulnerable to Cross-Site Scripting (CVE-2018-1728)
Dec 4, 2018 8:02 am EST
Categorized: Medium Severity
Share this post:
The product allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality and allowing spoofing attacks.
CVE(s): CVE-2018-1728
Affected product(s) and affected version(s):
IBM QRadar SIEM 7.2.0 to 7.2.8 Patch 13
IBM QRadar SIEM 7.3.0 to 7.3.1 Patch 6
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10742723
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/147707
from IBM Product Security Incident Response Team https://ift.tt/2EdvX4l