Description
IBM QRadar Suite Software 1.10.12.0 through 1.10.19.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 272203.
Published: 2024-04-23
Score: 5.4 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-51829 IBM QRadar Suite Software 1.10.12.0 through 1.10.19.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 272203.
History

Wed, 13 Aug 2025 13:45:00 +0000

Type Values Removed Values Added
First Time appeared Ibm
Ibm cloud Pak For Security
Ibm qradar Suite
CPEs cpe:2.3:a:ibm:cloud_pak_for_security:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_suite:*:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm cloud Pak For Security
Ibm qradar Suite

Subscriptions

Ibm Cloud Pak For Security Qradar Suite
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2024-08-02T21:16:43.610Z

Reserved: 2023-11-09T11:31:31.604Z

Link: CVE-2023-47731

cve-icon Vulnrichment

Updated: 2024-08-02T21:16:43.610Z

cve-icon NVD

Status : Analyzed

Published: 2024-04-23T13:15:46.343

Modified: 2025-08-13T13:31:42.767

Link: CVE-2023-47731

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses