IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://www.ibm.com/support/pages/node/7172212 |
History
Sat, 16 Nov 2024 00:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Linux
Linux linux Kernel |
|
Weaknesses | NVD-CWE-noinfo | |
CPEs | cpe:2.3:a:ibm:security_qradar_edr:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* |
|
Vendors & Products |
Linux
Linux linux Kernel |
Thu, 14 Nov 2024 14:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Thu, 14 Nov 2024 12:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. | |
Title | IBM Security ReaQta information disclosure | |
First Time appeared |
Ibm
Ibm security Qradar Edr |
|
Weaknesses | CWE-942 | |
CPEs | cpe:2.3:a:ibm:security_qradar_edr:3.12:*:*:*:*:*:*:* | |
Vendors & Products |
Ibm
Ibm security Qradar Edr |
|
References |
| |
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: ibm
Published: 2024-11-14T12:04:31.126Z
Updated: 2024-11-14T14:04:51.919Z
Reserved: 2024-09-03T13:50:17.060Z
Link: CVE-2024-45642
Vulnrichment
Updated: 2024-11-14T14:04:48.622Z
NVD
Status : Analyzed
Published: 2024-11-14T12:15:18.323
Modified: 2024-11-16T00:13:06.017
Link: CVE-2024-45642
Redhat
No data.