Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2024-56463

IBM QRadar SIEM cross-site scripting

Description

IBM QRadar SIEM 7.5 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM QRadar SIEM

Default version status: unaffected

  • 7.5 to ≤ 7.5.0 UP11affected

References