IBM QRadar SIEM Cross-Site Scripting Vulnerability (CNVD-2021-94164)

IBM QRadar SIEM is a solution from IBM America that leverages security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, etc. A cross-site scripting vulnerability exists in IBM QRadar SIEM, which stems from the product’s Web UI not validating user input data, and could be exploited by an attacker to cause credential disclosure in trusted sessions.