CVE-2020-4275

CVE-2020-4275: Cross-site scripting in the Carbon Black Response add-on for IBM QRadar SIEM. Affects Carbon Black Response versions 1.0.1–1.3.0. The vulnerability allows injecting arbitrary JavaScript into the Web UI, potentially leaking credentials within a trusted session. Root cause: improper ...

Security Bulletin: Carbon Black Response application add on to IBM QRadar SIEM is vulnerable to cross site scripting (CVE-2020-4275)

Summary Carbon Black Response application add on to IBM QRadar SIEM is vulnerable to cross site scripting. Vulnerability Details CVEID: CVE-2020-4275 DESCRIPTION: IBM QRadar SIEM s vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI...