CVE-2018-1733

Опубликовано: 29 янв. 2019

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

IBM QRadar SIEM 7.2 and 7.3 fails to adequately filter user-controlled input data for syntax that has control-plane implications which could allow an attacker to modify displayed content. IBM X-Force ID: 147811.

Ссылки

http://www.securityfocus.com/bid/106793
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/147811
VDB Entry
Vendor Advisory
https://www.ibm.com/support/docview.wss?uid=ibm10794523
Patch
Vendor Advisory
http://www.securityfocus.com/bid/106793
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/147811
VDB Entry
Vendor Advisory
https://www.ibm.com/support/docview.wss?uid=ibm10794523
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:*

Версия от 7.2.0 (включая) до 7.2.8 (включая)

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:*

Версия от 7.3.0 (включая) до 7.3.1 (включая)

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p13:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:p6:*:*:*:*:*:*

EPSS

Процентиль: 44%

0.00214

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-3m99-4q9x-vq6p