CVE-2017-1724

Published: Apr 26, 2018Modified: Nov 21, 2024

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

IBM Security QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134814.

Affected (85)

Products: Ibm: Qradar Security Information And Event Manager, Qradar Risk Manager, Qradar Vulnerability Manager, Qradar Incident Forensics, Qradar Network Insights

Ibm

5 products

Qradar Security Information And Event Manager

Qradar Risk Manager

Qradar Vulnerability Manager

Qradar Incident Forensics

Qradar Network Insights

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Ibm Qradar Security Information And Event Manager	From 7.2.0 to 7.2.8
Ibm Qradar Security Information And Event Manager	Version 7.2.8
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p10
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p11
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p1
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p2
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p3
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p4
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p5
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p6
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p7
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p8
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p9
Ibm Qradar Security Information And Event Manager	Version 7.3.0
Ibm Qradar Security Information And Event Manager	Version 7.3.1
Ibm Qradar Security Information And Event Manager	Version 7.3.1 p1
Ibm Qradar Security Information And Event Manager	Version 7.3.1 p2

Configuration B

17 vulnerable

Vulnerable Software	Affected Versions
Ibm Qradar Risk Manager	From 7.2.0 to 7.2.8
Ibm Qradar Risk Manager	Version 7.2.8
Ibm Qradar Risk Manager	Version 7.2.8 p10
Ibm Qradar Risk Manager	Version 7.2.8 p11
Ibm Qradar Risk Manager	Version 7.2.8 p1
Ibm Qradar Risk Manager	Version 7.2.8 p2
Ibm Qradar Risk Manager	Version 7.2.8 p3
Ibm Qradar Risk Manager	Version 7.2.8 p4
Ibm Qradar Risk Manager	Version 7.2.8 p5
Ibm Qradar Risk Manager	Version 7.2.8 p6
Ibm Qradar Risk Manager	Version 7.2.8 p7
Ibm Qradar Risk Manager	Version 7.2.8 p8
Ibm Qradar Risk Manager	Version 7.2.8 p9
Ibm Qradar Risk Manager	Version 7.3.0
Ibm Qradar Risk Manager	Version 7.3.1
Ibm Qradar Risk Manager	Version 7.3.1 p1
Ibm Qradar Risk Manager	Version 7.3.1 p2

Configuration C

17 vulnerable

Vulnerable Software	Affected Versions
Ibm Qradar Vulnerability Manager	From 7.2.0 to 7.2.8
Ibm Qradar Vulnerability Manager	Version 7.2.8
Ibm Qradar Vulnerability Manager	Version 7.2.8 p10
Ibm Qradar Vulnerability Manager	Version 7.2.8 p11
Ibm Qradar Vulnerability Manager	Version 7.2.8 p1
Ibm Qradar Vulnerability Manager	Version 7.2.8 p2
Ibm Qradar Vulnerability Manager	Version 7.2.8 p3
Ibm Qradar Vulnerability Manager	Version 7.2.8 p4
Ibm Qradar Vulnerability Manager	Version 7.2.8 p5
Ibm Qradar Vulnerability Manager	Version 7.2.8 p6
Ibm Qradar Vulnerability Manager	Version 7.2.8 p7
Ibm Qradar Vulnerability Manager	Version 7.2.8 p8
Ibm Qradar Vulnerability Manager	Version 7.2.8 p9
Ibm Qradar Vulnerability Manager	Version 7.3.0
Ibm Qradar Vulnerability Manager	Version 7.3.1
Ibm Qradar Vulnerability Manager	Version 7.3.1 p1
Ibm Qradar Vulnerability Manager	Version 7.3.1 p2

Configuration D

17 vulnerable

Vulnerable Software	Affected Versions
Ibm Qradar Incident Forensics	From 7.2.0 to 7.2.8
Ibm Qradar Incident Forensics	Version 7.2.8
Ibm Qradar Incident Forensics	Version 7.2.8 p10
Ibm Qradar Incident Forensics	Version 7.2.8 p11
Ibm Qradar Incident Forensics	Version 7.2.8 p1
Ibm Qradar Incident Forensics	Version 7.2.8 p2
Ibm Qradar Incident Forensics	Version 7.2.8 p3
Ibm Qradar Incident Forensics	Version 7.2.8 p4
Ibm Qradar Incident Forensics	Version 7.2.8 p5
Ibm Qradar Incident Forensics	Version 7.2.8 p6
Ibm Qradar Incident Forensics	Version 7.2.8 p7
Ibm Qradar Incident Forensics	Version 7.2.8 p8
Ibm Qradar Incident Forensics	Version 7.2.8 p9
Ibm Qradar Incident Forensics	Version 7.3.0
Ibm Qradar Incident Forensics	Version 7.3.1
Ibm Qradar Incident Forensics	Version 7.3.1 p1
Ibm Qradar Incident Forensics	Version 7.3.1 p2

Configuration E

17 vulnerable

Vulnerable Software	Affected Versions
Ibm Qradar Network Insights	From 7.2.0 to 7.2.8
Ibm Qradar Network Insights	Version 7.2.8
Ibm Qradar Network Insights	Version 7.2.8 p10
Ibm Qradar Network Insights	Version 7.2.8 p11
Ibm Qradar Network Insights	Version 7.2.8 p1
Ibm Qradar Network Insights	Version 7.2.8 p2
Ibm Qradar Network Insights	Version 7.2.8 p3
Ibm Qradar Network Insights	Version 7.2.8 p4
Ibm Qradar Network Insights	Version 7.2.8 p5
Ibm Qradar Network Insights	Version 7.2.8 p6
Ibm Qradar Network Insights	Version 7.2.8 p7
Ibm Qradar Network Insights	Version 7.2.8 p8
Ibm Qradar Network Insights	Version 7.2.8 p9
Ibm Qradar Network Insights	Version 7.3.0
Ibm Qradar Network Insights	Version 7.3.1
Ibm Qradar Network Insights	Version 7.3.1 p1
Ibm Qradar Network Insights	Version 7.3.1 p2