CVE-2017-1133: XSS

Published Mar 7, 2017

Updated

IBM QRadar 7.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999534.

Affected Software

18 affected components

IBM QRadar Incident Forensics=7.2.0

IBM QRadar Incident Forensics=7.2.1

IBM QRadar Incident Forensics=7.2.2

IBM QRadar Incident Forensics=7.2.3

IBM QRadar Incident Forensics=7.2.4

IBM QRadar Incident Forensics=7.2.5

IBM QRadar Incident Forensics=7.2.6

IBM QRadar Incident Forensics=7.2.7

IBM QRadar Incident Forensics=7.2.8

IBM QRadar Security Information and Event Manager=7.2.0

IBM QRadar Security Information and Event Manager=7.2.1

IBM QRadar Security Information and Event Manager=7.2.2

IBM QRadar Security Information and Event Manager=7.2.3

IBM QRadar Security Information and Event Manager=7.2.4

IBM QRadar Security Information and Event Manager=7.2.5

IBM QRadar Security Information and Event Manager=7.2.6

IBM QRadar Security Information and Event Manager=7.2.7

IBM QRadar Security Information and Event Manager=7.2.8

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg21999534

Event History

Mar 7, 2017

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Data Sourced

via NVD·05:59 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2017-1133?

CVE-2017-1133 is classified as a high-severity vulnerability due to its potential for credentials disclosure through cross-site scripting.

How do I fix CVE-2017-1133?

To mitigate CVE-2017-1133, users should apply the latest security updates and patches provided by IBM for affected versions of QRadar.

Which versions of QRadar are affected by CVE-2017-1133?

CVE-2017-1133 affects IBM QRadar versions 7.2.0 through 7.2.8.

What type of vulnerability is CVE-2017-1133?

CVE-2017-1133 is a cross-site scripting (XSS) vulnerability present in IBM QRadar.

What are the potential impacts of CVE-2017-1133?

Exploitation of CVE-2017-1133 can lead to unauthorized script execution in a user's browser, possibly resulting in credentials theft.