CVE-2017-1724

IBM Security QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134814.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p1:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p10:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p11:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p2:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p3:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p4:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p5:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p6:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p7:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p8:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p9:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:p1:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:p2:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:ibm:qradar_risk_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_risk_manager:7.2.8:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_risk_manager:7.2.8:p1:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_risk_manager:7.2.8:p10:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_risk_manager:7.2.8:p11:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_risk_manager:7.2.8:p2:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_risk_manager:7.2.8:p3:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_risk_manager:7.2.8:p4:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_risk_manager:7.2.8:p5:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_risk_manager:7.2.8:p6:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_risk_manager:7.2.8:p7:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_risk_manager:7.2.8:p8:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_risk_manager:7.2.8:p9:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_risk_manager:7.3.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_risk_manager:7.3.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_risk_manager:7.3.1:p1:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_risk_manager:7.3.1:p2:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:a:ibm:qradar_vulnerability_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p1:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p10:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p11:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p2:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p3:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p4:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p5:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p6:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p7:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p8:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p9:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_vulnerability_manager:7.3.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_vulnerability_manager:7.3.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_vulnerability_manager:7.3.1:p1:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_vulnerability_manager:7.3.1:p2:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:a:ibm:qradar_incident_forensics:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p1:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p10:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p11:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p2:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p3:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p4:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p5:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p6:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p7:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p8:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p9:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_incident_forensics:7.3.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:p1:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:p2:*:*:*:*:*:*

Configuration 5 (hide)

OR cpe:2.3:a:ibm:qradar_network_insights:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_network_insights:7.2.8:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p1:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p10:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p11:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p2:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p3:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p4:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p5:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p6:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p7:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p8:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_network_insights:7.2.8:p9:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_network_insights:7.3.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_network_insights:7.3.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_network_insights:7.3.1:p1:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_network_insights:7.3.1:p2:*:*:*:*:*:*

History

No history.

Information

Published : 2018-04-26 14:29

Updated : 2023-12-10 12:30


NVD link : CVE-2017-1724

Mitre link : CVE-2017-1724

CVE.ORG link : CVE-2017-1724


JSON object : View

Products Affected

ibm

  • qradar_vulnerability_manager
  • qradar_incident_forensics
  • qradar_network_insights
  • qradar_risk_manager
  • qradar_security_information_and_event_manager
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')