CVE-2016-2869

—

CVSS 3.0

5.4 medium

EPSS

<1%p47

Published

Nov 30, 2016 (Nov 30, 2016)

Modified

Jun 17, 2026

Description

Multiple cross-site scripting (XSS) vulnerabilities in the UI in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allow remote authenticated users to inject arbitrary web script or HTML via crafted fields in a URL.

Vendors: ibm
Products: qradar security information and event manager
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.