Troy E Fisher

Name of the Vulnerable Software and Affected Versions: IBM QRadar SIEM versions 7.2 through 7.3 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session. Recommendations: For versions 7.2 and 7.3, update to a version that includes a fix for this issue to prevent cross-site scripting attacks.

**Name of the Vulnerable Software and Affected Versions** IBM QRadar SIEM versions 7.2 through 7.3 **Description** A local user could obtain sensitive information when exporting content, which could aid an attacker in further attacks against the system. **Recommendations** For versions 7.2 and 7.3, update to a version that includes the fix for this issue to prevent local users from obtaining sensitive information.