IBM Security QRadar EDR Multiple Vulnerabilities Advisory (CVE-2024-45099/CVE-2024-45642)

From this webpage screenshot, the following key vulnerability information can be obtained: 1. Vulnerability Name: IBM Security QRadar EDR Software has multiple vulnerabilities (CVE-2024-45099, CVE-2024-45642) 2. Affected Product: IBM Security QRadar EDR 3. Affected Version: 3.12 4. Vulnerability Description: - CVE-2024-45099: IBM Security ReaQta is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI, thereby altering the intended functionality and potentially leading to credential disclosure within a trusted session. - CVE-2024-45642: IBM Security ReaQta could disclose sensitive information due to an overly permissive cross-domain policy. 5. Remediation Recommendations: - IBM encourages customers to upgrade their systems as soon as possible. - Approval policies can be configured to control whether operator upgrades are performed automatically. 6. Workarounds and Mitigations: None 7. Reference Links: - Complete CVSS v3 Guide - On-line Calculator v3 - IBM Secure Engineering Web Portal - IBM Product Security Incident Response Blog 8. Disclaimer: The CVSS scores provided by IBM are for reference only and do not guarantee the security of any specific product. Customers should independently assess the security of affected products. This information helps users understand the details of the vulnerabilities, the affected products and versions, remediation recommendations, and relevant reference resources.

Goal Reached Thanks to every supporter — we hit 100%!

IBM Security QRadar EDR Multiple Vulnerabilities Advisory (CVE-2024-45099/CVE-2024-45642)