CVE-2023-50960: Medium severity ibm security qradar vulnerability

Q: What is the severity of CVE-2023-50960?

CVE-2023-50960 has a moderate severity rating due to its potential impact on user sessions and credential disclosure.

Q: How do I fix CVE-2023-50960?

To fix CVE-2023-50960, ensure that you update your IBM QRadar SIEM to the latest version beyond 7.5 - 7.5.0 UP7 IF06.

Q: Who is affected by CVE-2023-50960?

CVE-2023-50960 affects users of IBM QRadar SIEM versions 7.5 - 7.5.0 UP7 IF06 and earlier.

Q: What is stored cross-site scripting in CVE-2023-50960?

Stored cross-site scripting in CVE-2023-50960 allows attackers to inject malicious JavaScript code into the web interface of QRadar.

Q: What are the potential impacts of CVE-2023-50960?

The potential impacts of CVE-2023-50960 include unauthorized actions taken on behalf of the user and possible credential theft.

Published Mar 26, 2024

Updated

IBM QRadar is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected Software

1 affected component

IBM QRadar SIEM<=7.5 - 7.5.0 UP7 IF06

Event History

Mar 26, 2024

CVE Published

via IBM·12:00 AM

Parent advisories

This vulnerability appears in the following advisories.

IBM-7145262

Frequently Asked Questions

What is the severity of CVE-2023-50960?

CVE-2023-50960 has a moderate severity rating due to its potential impact on user sessions and credential disclosure.

How do I fix CVE-2023-50960?

To fix CVE-2023-50960, ensure that you update your IBM QRadar SIEM to the latest version beyond 7.5 - 7.5.0 UP7 IF06.

Who is affected by CVE-2023-50960?

CVE-2023-50960 affects users of IBM QRadar SIEM versions 7.5 - 7.5.0 UP7 IF06 and earlier.

What is stored cross-site scripting in CVE-2023-50960?