IBM Security Bulletin: IBM QRadar SIEM is vulnerable to cross-site scripting. (CVE-2017-1724)

Apr 25, 2018 9:01 am EDT

Categorized: Medium Severity

Share this post:

The product allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality and allowing spoofing attacks.

CVE(s): CVE-2017-1724

Affected product(s) and affected version(s):

QRadar / QRM / QVM / QRIF / QNI 7.3.0 – 7.3.1 Patch 2

QRadar / QRM / QVM / QRIF / QNI 7.2.0 to 7.2.8 Patch 11

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22015807
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/134814

from IBM Product Security Incident Response Team https://ift.tt/2FfLnRC