CVE-2024-28784: 
IBM QRadar SIEM vulnerability analysis and mitigation

IBM QRadar SIEM 7.5 has been identified with a cross-site scripting (XSS) vulnerability. The vulnerability was disclosed on March 27, 2024, and is tracked as CVE-2024-28784. This security flaw affects IBM QRadar SIEM version 7.5 and its update packs, allowing users to embed arbitrary JavaScript code in the Web UI (NVD).

The vulnerability is classified as a cross-site scripting (XSS) issue, identified by CWE-79 (Improper Neutralization of Input During Web Page Generation). According to IBM's assessment, the vulnerability has been assigned a CVSS v3.1 base score of 5.4 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N, indicating network accessibility with low attack complexity and requiring low privileges (NVD).

When exploited, this vulnerability can alter the intended functionality of the Web UI and potentially lead to credentials disclosure within a trusted session. The impact is particularly concerning as it affects the security management platform itself, which is typically used to monitor and respond to security incidents (NVD).

The vulnerability requires low privileges to exploit and user interaction is necessary for successful exploitation. The attack vector is network-accessible, making it possible for remote attackers to attempt exploitation (NVD).