CVE-2023-35006: IBM Security ReaQta HTML injection
IBM Security QRadar EDR 3.12 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.
Other sources
IBM Security ReaQta is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-35006?
CVE-2023-35006 is categorized as a high severity vulnerability due to the potential for HTML injection attacks.
How do I fix CVE-2023-35006?
To fix CVE-2023-35006, upgrade IBM Security QRadar EDR to a version that is not affected by this vulnerability.
Who is affected by CVE-2023-35006?
CVE-2023-35006 affects users of IBM Security QRadar EDR version 3.12.
What kind of attack can exploit CVE-2023-35006?
CVE-2023-35006 can be exploited through HTML injection, allowing attackers to execute malicious code in a victim's browser.
What protections can mitigate CVE-2023-35006?
To mitigate CVE-2023-35006, implement input validation and output encoding practices to prevent HTML injection.