Multiple IBM Products CVE-2016-9723 Cross Site Scripting Vulnerability

Bugtraq ID:	98073
Class:	Unknown
CVE:	CVE-2016-9723
Remote:	Yes
Local:	No
Published:	Mar 01 2017 12:00AM
Updated:	May 02 2017 12:11AM
Credit:	IBM X-Force Ethical Hacking Team.
Vulnerable:	IBM QRadar Security Information and Event Manager 7.2.7 IBM QRadar Security Information and Event Manager 7.2.8 IBM QRadar Security Information and Event Manager 7.2.6 IBM QRadar Security Information and Event Manager 7.2.5 IBM QRadar Security Information and Event Manager 7.2.3 IBM QRadar Security Information and Event Manager 7.2.2 IBM QRadar Security Information and Event Manager 7.2.1 IBM QRadar Security Information and Event Manager 7.2.0 IBM QRadar Incident Forensics 7.2.7 IBM QRadar Incident Forensics 7.2.6 IBM QRadar Incident Forensics 7.2.5 IBM QRadar Incident Forensics 7.2.4 IBM QRadar Incident Forensics 7.2.3 IBM QRadar Incident Forensics 7.2.2 IBM QRadar Incident Forensics 7.2.1 IBM QRadar Incident Forensics 7.2
Not Vulnerable:

Multiple IBM Products CVE-2016-9723 Cross Site Scripting Vulnerability

Multiple IBM Products are prone to a cross-site scripting vulnerability.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Multiple IBM Products CVE-2016-9723 Cross Site Scripting Vulnerability

An attacker can exploit the issue by enticing an unsuspecting user to visit a specially crafted URL.

Multiple IBM Products CVE-2016-9723 Cross Site Scripting Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple IBM Products CVE-2016-9723 Cross Site Scripting Vulnerability

References:

• IBM Homepage (IBM)
  
• swg21999534: IBM QRadar SIEM and QRadar Incident Forensics are vulnerable to cro (IBM)