CVE-2016-2869

Description

Multiple cross-site scripting (XSS) vulnerabilities in the UI in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allow remote authenticated users to inject arbitrary web script or HTML via crafted fields in a URL.

References

http://www.securityfocus.com/bid/94859

http://www-01.ibm.com/support/docview.wss?uid=swg21987768

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS