Skip to content
Sign in
5.4 Medium

CVE-2023-35006 IBM Security QRadar EDR 3.12 is vulnerable to HTML injection

Description

IBM Security QRadar EDR 3.12 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.

Affected products and versions

Product Affected versions Fixed in
Security QRadar EDR 3.12 No fix stated

Other CVEs of Security QRadar EDR

The 9 CVEs of Security QRadar EDR →
CVE-2024-45636 IBM Security QRadar EDR 3.12 through 3.12.24 stores user credentials in plain text which can be read by a local… 4.1 Medium CVE-2025-36376 IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an… 6.3 Medium CVE-2025-36377 IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an… 6.3 Medium CVE-2025-36379 IBM Security QRadar EDR 3.12 through 3.12.23 IBM Security ReaQta uses weaker than expected cryptographic algorithms that… 5.9 Medium
Track this CVE