IBM QRadar Security Information and Event Manager CVE-2013-6307 Cross Site Scripting Vulnerability

Bugtraq ID:	63939
Class:	Input Validation Error
CVE:	CVE-2013-6307
Remote:	Yes
Local:	No
Published:	Nov 25 2013 12:00AM
Updated:	Feb 17 2014 12:47AM
Credit:	Erchiqui Azzeddine
Vulnerable:
Not Vulnerable:

IBM QRadar Security Information and Event Manager CVE-2013-6307 Cross Site Scripting Vulnerability

IBM QRadar Security Information and Event Manager is prone to an unspecified cross-site scripting vulnerability.

An attacker can exploit this issue to execute arbitrary script code in the context of the vulnerable site, potentially allowing the attacker to steal cookie-based authentication credentials.

IBM QRadar Security Information and Event Manager 7.0 is vulnerable.

IBM QRadar Security Information and Event Manager CVE-2013-6307 Cross Site Scripting Vulnerability

Attackers can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.

IBM QRadar Security Information and Event Manager CVE-2013-6307 Cross Site Scripting Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM QRadar Security Information and Event Manager CVE-2013-6307 Cross Site Scripting Vulnerability

References:

• IBM Homepage (IBM)