CVE-2017-1133

IBM QRadar 7.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999534.

Published: Mar 7, 2017
Updated: Nov 9, 2025
CVE: CVE-2017-1133
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 3.5
AV:N/AC:M/Au:S/C:N/I:P/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
ibm / qradar_security_information_and_event_manager	7.2.8	7.2.8.x
ibm / qradar_security_information_and_event_manager	7.2.7	7.2.7.x
ibm / qradar_security_information_and_event_manager	7.2.0	7.2.0.x
ibm / qradar_security_information_and_event_manager	7.2.4	7.2.4.x
ibm / qradar_incident_forensics	7.2.0	7.2.0.x
ibm / qradar_incident_forensics	7.2.5	7.2.5.x
ibm / qradar_security_information_and_event_manager	7.2.6	7.2.6.x
ibm / qradar_incident_forensics	7.2.7	7.2.7.x
ibm / qradar_incident_forensics	7.2.8	7.2.8.x
ibm / qradar_security_information_and_event_manager	7.2.1	7.2.1.x
ibm / qradar_incident_forensics	7.2.1	7.2.1.x
ibm / qradar_incident_forensics	7.2.2	7.2.2.x
ibm / qradar_incident_forensics	7.2.3	7.2.3.x
ibm / qradar_incident_forensics	7.2.6	7.2.6.x
ibm / qradar_security_information_and_event_manager	7.2.5	7.2.5.x
ibm / qradar_incident_forensics	7.2.4	7.2.4.x
ibm / qradar_security_information_and_event_manager	7.2.2	7.2.2.x
ibm / qradar_security_information_and_event_manager	7.2.3	7.2.3.x

Vulnerability Database

300,444

CVE-2017-1133

Deep Security Visibility Without the Complexity