6.1
Moyenne
CVE-2021-38896 IBM QRadar Advisor 2.5 through 2.6.1 is vulnerable to cross-site scripting
Description
IBM QRadar Advisor 2.5 through 2.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 209566.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Qradar Advisor | 2.6.1 | Pas de correctif indiqué |
| Qradar Advisor | 2.5 | Pas de correctif indiqué |
Autres CVE de Qradar Advisor
Les 6 CVE de Qradar Advisor →
CVE-2021-20380
IBM QRadar Advisor With Watson App 1.1 through 2.5 as used on IBM QRadar SIEM 7.4 could allow a remote user to obtain…
5.3
Moyenne
CVE-2020-4408
The IBM QRadar Advisor 1.1 through 2.5.2 with Watson App for IBM QRadar SIEM does not adequately mask all passwords…
4.2
Moyenne
CVE-2019-4557
IBM Qradar Advisor 1.1 through 2.5 with Watson uses weaker than expected cryptographic algorithms that could allow an…
5.9
Moyenne
CVE-2019-4672
IBM QRadar Advisor 1.1 through 2.5 could allow an unauthorized attacker to obtain sensitive information from specially…
5.3
Moyenne