2 lines
5.2 KiB
JSON
2 lines
5.2 KiB
JSON
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:-:*:*:*:*:*:*","cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_14:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"QRadar SIEM","vendor":"IBM","versions":[{"lessThanOrEqual":"7.5.0 Update Pack 14","status":"affected","version":"7.5.0","versionType":"semver"}]}],"source":"psirt@us.ibm.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:-:*:*:*:*:*:*","matchCriteriaId":"DACA17CC-8B71-4E71-B075-BFFB65AD989C","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_1:*:*:*:*:*:*","matchCriteriaId":"BA60FDE5-8C40-4C7A-97CF-BA2A64BF307D","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_10:*:*:*:*:*:*","matchCriteriaId":"3D6ADD3A-99BC-495F-9835-92D16DF18FC1","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_11:*:*:*:*:*:*","matchCriteriaId":"5C899CFD-26F5-43FA-A39E-7196E2929AD9","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_12:*:*:*:*:*:*","matchCriteriaId":"0C534E65-D418-4A5E-B326-F449337C0408","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_13:*:*:*:*:*:*","matchCriteriaId":"A3F6494F-EC1B-4963-908A-88190E5BF835","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_14:*:*:*:*:*:*","matchCriteriaId":"CD7E8A56-06DB-45AC-9769-4B198B142CAA","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_2:*:*:*:*:*:*","matchCriteriaId":"AB518E06-00BA-48F3-8AEC-6E1E97CAA2CC","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_3:*:*:*:*:*:*","matchCriteriaId":"289027A2-178C-45DE-A86F-1207F23D13B1","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_4:*:*:*:*:*:*","matchCriteriaId":"5047AECF-879B-427A-ACF7-ECB10965E1B0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_5:*:*:*:*:*:*","matchCriteriaId":"CD448AB8-E3CC-41A1-9D32-B1B35C68FA5C","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_6:*:*:*:*:*:*","matchCriteriaId":"9F4014E8-42E2-4B76-B2DA-8B50929A4AB5","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_7:*:*:*:*:*:*","matchCriteriaId":"BD0A459A-C74A-4E18-83B3-4C29D47D2C2B","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_8:*:*:*:*:*:*","matchCriteriaId":"721EFDD7-EE35-430C-AF17-C54BDB10434E","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_9:*:*:*:*:*:*","matchCriteriaId":"4C3D4D7E-0B57-47E3-BD16-5BBCE05063F5","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session."},{"lang":"es","value":"IBM QRadar SIEM 7.5.0 hasta 7.5.0 Paquete de Actualización 14 es vulnerable a cross-site scripting. Esta vulnerabilidad permite a un usuario autenticado incrustar código JavaScript arbitrario en la interfaz de usuario web, alterando así la funcionalidad prevista y lo que podría llevar a la divulgación de credenciales dentro de una sesión de confianza."}],"id":"CVE-2026-1276","lastModified":"2026-06-17T10:15:26.257","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.3,"impactScore":2.7,"source":"psirt@us.ibm.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-1276","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-03-19T17:00:32.184865Z","version":"2.0.3"}}]},"published":"2026-03-19T03:16:01.657","references":[{"source":"psirt@us.ibm.com","tags":["Vendor Advisory"],"url":"https://www.ibm.com/support/pages/node/7266709"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"psirt@us.ibm.com","type":"Secondary"}]}
|