CVE-2018-1728

IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 147707.

Link	Resource
https://www.ibm.com/support/docview.wss?uid=ibm10742723	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/147707	VDB Entry Vendor Advisory

Configuration 1

cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p1:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p3:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p4:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p5:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p6:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p7:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p8:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p9:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p10:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p11:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:p1:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:p2:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_incident_forensics:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p12:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p13:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:p3:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:p4:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:p5:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:p6:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:-:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_incident_forensics:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:-:*:*:*:*:*:*

---

Published : 2018-12-05 05:29

Updated : 2019-10-09 11:38

---

NVD link : CVE-2018-1728

Mitre link : CVE-2018-1728

No products.

CWE-79