IBM Resilient v26.0, v26.1, and v26.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference#: 213457065.
IBM Resilient SOAR could allow a privileged user to create create malicious scripts that could be executed as another user.
IBM Resilient OnPrem uses incomplete blocklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity.
IBM Resilient could allow a remote attacker to execute arbitrary code on the system, caused by formula injection due to improper input validation.
IBM Resilient OnPrem could allow an attacker on the internal net work to provide the server with a spoofed source IP address.
IBM Resilient OnPrem could allow a local privileged attacker to obtain sensitive information due to improper or nonexisting encryption.
IBM Resilient SOAR V38.0 users may experience a denial of service of the SOAR Platform due to a insufficient input validation. IBM X-Force ID: 165589.