Security Bulletin: IBM QRadar SIEM is vulnerable to cross-site scripting. (CVE-2016-2869)

Summary Cross-Site Scripting was found in various fields in the QRadar UI. Vulnerability Details CVE-ID: CVE-2016-2869 Description: IBM QRadar is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a...

CVE-2016-2869

CVE-2016-2869: IBM QRadar SIEM UI is vulnerable to Cross‑Site Scripting due to improper validation of user-supplied input. A remote authenticated user could inject script via crafted URL fields in QRadar UI. Affected products/versions: IBM QRadar 7.1 (before MR2 Patch 13) and 7.2 (before 7.2.7). ...