6.1
Medium
CVE-2021-38896 IBM QRadar Advisor 2.5 through 2.6.1 is vulnerable to cross-site scripting
Description
IBM QRadar Advisor 2.5 through 2.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 209566.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Qradar Advisor | 2.6.1 | No fix stated |
| Qradar Advisor | 2.5 | No fix stated |
Other CVEs of Qradar Advisor
The 6 CVEs of Qradar Advisor →
CVE-2021-20380
IBM QRadar Advisor With Watson App 1.1 through 2.5 as used on IBM QRadar SIEM 7.4 could allow a remote user to obtain…
5.3
Medium
CVE-2020-4408
The IBM QRadar Advisor 1.1 through 2.5.2 with Watson App for IBM QRadar SIEM does not adequately mask all passwords…
4.2
Medium
CVE-2019-4557
IBM Qradar Advisor 1.1 through 2.5 with Watson uses weaker than expected cryptographic algorithms that could allow an…
5.9
Medium
CVE-2019-4672
IBM QRadar Advisor 1.1 through 2.5 could allow an unauthorized attacker to obtain sensitive information from specially…
5.3
Medium