5.4
Moyenne
CVE-2023-35006 IBM Security QRadar EDR 3.12 is vulnerable to HTML injection
Description
IBM Security QRadar EDR 3.12 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Security QRadar EDR | 3.12 | Pas de correctif indiqué |
Autres CVE de Security QRadar EDR
Les 9 CVE de Security QRadar EDR →
CVE-2024-45636
IBM Security QRadar EDR 3.12 through 3.12.24 stores user credentials in plain text which can be read by a local…
4.1
Moyenne
CVE-2025-36376
IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an…
6.3
Moyenne
CVE-2025-36377
IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an…
6.3
Moyenne
CVE-2025-36379
IBM Security QRadar EDR 3.12 through 3.12.23 IBM Security ReaQta uses weaker than expected cryptographic algorithms that…
5.9
Moyenne