Matt Mccarty

**Name of the Vulnerable Software and Affected Versions** IBM Security Guardium Big Data Intelligence version 4.0 **Description** The issue is related to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this to expose sensitive information or consume memory resources. **Recommendations** For IBM Security Guardium Big Data Intelligence version 4.0, consider disabling XML data processing until a patch is available. Restrict access to sensitive information to minimize the risk of exploitation. As a temporary workaround, limit the consumption of memory resources to prevent potential denial-of-service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IBM Security Guardium Big Data Intelligence version 4.0 (SonarG) **Description** The issue is related to improper restriction of resource requests, allowing an actor to consume more resources than intended. **Recommendations** For IBM Security Guardium Big Data Intelligence version 4.0 (SonarG), at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: IBM QRadar SIEM versions 7.2 through 7.3 Description: The issue allows a security-critical resource to be read or modified by unintended actors due to improper permission specifications. Recommendations: For IBM QRadar SIEM versions 7.2 through 7.3, update the permission settings for the security-critical resource to prevent unintended access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IBM QRadar SIEM versions 7.2 through 7.3 **Description** A local user could obtain sensitive information when exporting content, which could aid an attacker in further attacks against the system. **Recommendations** For versions 7.2 and 7.3, update to a version that includes the fix for this issue to prevent local users from obtaining sensitive information.

Name of the Vulnerable Software and Affected Versions: IBM QRadar SIEM versions 7.2 through 7.3 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session. Recommendations: For versions 7.2 and 7.3, update to a version that includes a fix for this issue to prevent cross-site scripting attacks.

**Name of the Vulnerable Software and Affected Versions** IBM Security Information Queue (ISIQ) versions 1.0.0 through 1.0.2 **Description** The issue discloses sensitive information to unauthorized users, which can be used to mount further attacks on the system. **Recommendations** For versions 1.0.0 through 1.0.2, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** IBM Security Information Queue (ISIQ) versions 1.0.0 through 1.0.2 **Description** A remote attacker could hijack the clicking action of a victim by persuading them to visit a malicious Web site, potentially launching further attacks against the victim. **Recommendations** For versions 1.0.0 through 1.0.2, consider restricting access to potentially malicious Web sites to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IBM Security Information Queue (ISIQ) versions 1.0.0 through 1.0.2 **Description** The issue allows web pages to be stored locally, which can then be read by another user on the system. **Recommendations** For versions 1.0.0 through 1.0.2, consider restricting access to sensitive web pages to minimize the risk of unauthorized reading. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** IBM Security Information Queue (ISIQ) versions 1.0.0 through 1.0.2 **Description** The issue generates an error message that includes sensitive information, which could be used in further attacks against the system. **Recommendations** For versions 1.0.0 through 1.0.2, consider restricting access to error messages to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: IBM QRadar SIEM versions 7.2.8 through 7.3 Description: The issue allows an attacker to potentially spoof a trusted entity by using a man-in-the-middle (MITM) attack, due to incorrect certificate validation. Recommendations: For versions 7.2.8 through 7.3, update to a version that correctly validates certificates to prevent MITM attacks.

**Name of the Vulnerable Software and Affected Versions** IBM QRadar SIEM versions 7.2 through 7.3 **Description** The issue is related to incorrect restriction of XML links to external objects, which can be exploited by a remote attacker to expose sensitive information or consume memory resources. This can be achieved through a XML External Entity Injection (XXE) attack when processing XML data. **Recommendations** For IBM QRadar SIEM versions 7.2 and 7.3, update to a version that includes a fix for this issue to prevent exploitation. As a temporary workaround, consider restricting XML data processing to minimize the risk of XXE attacks until a patch is available.

**Name of the Vulnerable Software and Affected Versions** IBM QRadar SIEM versions 7.2 through 7.3 **Description** The issue is related to the lack of measures to neutralize script-related tags, which can be exploited by a remote attacker to disclose protected information. This allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session. **Recommendations** For IBM QRadar SIEM versions 7.2 and 7.3, consider disabling the Web UI functionality until a patch is available to prevent the embedding of arbitrary JavaScript code. As a temporary workaround, restrict access to the Web UI to minimize the risk of exploitation.