CVE-2023-40367: IBM QRadar SIEM cross-site scripting

Q: What is the vulnerability ID of this issue?

The vulnerability ID of this issue is CVE-2023-40367.

Q: What is the severity of CVE-2023-40367?

The severity of CVE-2023-40367 is medium with a severity value of 5.4.

Q: What is the affected software version?

The affected software version is IBM QRadar SIEM 7.5.0 - 7.5.0 UP6.

Q: Are there any references for this vulnerability?

Yes, you can find references for this vulnerability at the following links: [Vulnerability Details](https://exchange.xforce.ibmcloud.com/vulnerabilities/263376) and [IBM Support](https://www.ibm.com/support/pages/node/7049133).

Published Oct 10, 2023

Updated

IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 263376.

Other sources

IBM QRadar SIEM is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

— IBM

Affected Software

9 affected components

IBM QRadar Security Information and Event Manager=7.5.0

IBM QRadar Security Information and Event Manager=7.5.0-update_pack_1

IBM QRadar Security Information and Event Manager=7.5.0-update_pack_2

IBM QRadar Security Information and Event Manager=7.5.0-update_pack_3

IBM QRadar Security Information and Event Manager=7.5.0-update_pack_4

IBM QRadar Security Information and Event Manager=7.5.0-update_pack_5

IBM QRadar Security Information and Event Manager=7.5.0-update_pack_6

Linux Linux kernel

IBM QRadar SIEM<=7.5.0 - 7.5.0 UP6

Remediation

Patch Available

https://www.ibm.com/support/pages/node/7049133

Event History

Oct 10, 2023

CVE Published

via IBM·12:00 AM

Oct 14, 2023

CVE Published

via MITRE·04:46 PM

Data Sourced

via MITRE·04:46 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7049133

Frequently Asked Questions

What is the vulnerability ID of this issue?

The vulnerability ID of this issue is CVE-2023-40367.

What is the severity of CVE-2023-40367?

The severity of CVE-2023-40367 is medium with a severity value of 5.4.

What is the affected software version?

The affected software version is IBM QRadar SIEM 7.5.0 - 7.5.0 UP6.

What is the potential impact of this vulnerability?

This vulnerability allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.

Are there any references for this vulnerability?