CVE-2023-50961: 
IBM QRadar SIEM vulnerability analysis and mitigation

IBM QRadar SIEM 7.5 was identified with a stored cross-site scripting vulnerability (CVE-2023-50961). The vulnerability affects versions 7.5.x prior to 7.5.0 UP8, allowing users to embed arbitrary JavaScript code in the Web UI (IBM Security Bulletin).

The vulnerability has been assigned a CVSS Base score of 7.2 with a vector of (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). The vulnerability enables users to embed arbitrary JavaScript code in the Web UI, which can alter intended functionality and potentially lead to credentials disclosure within a trusted session (IBM Security Bulletin).

The exploitation of this vulnerability could result in credentials disclosure within trusted sessions and alteration of the intended Web UI functionality. The high CVSS score indicates significant potential impact on the confidentiality, integrity, and availability of the system (IBM Security Bulletin).

The vulnerability requires a remote authenticated attacker to execute, with network vector access and low attack complexity. The attack requires high privileges but no user interaction for successful exploitation (IBM Security Bulletin).

IBM has released version 7.5.0 UP8 to address this vulnerability. No workarounds are available, and IBM strongly encourages customers to update their systems promptly to the latest version (IBM Security Bulletin).