Medium severity6.1NVD Advisory· Published Oct 20, 2021· Updated Jun 17, 2026
CVE-2021-38896
CVE-2021-38896
Description
IBM QRadar Advisor 2.5 through 2.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 209566.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:ibm:qradar_advisor:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ibm:qradar_advisor:*:*:*:*:*:*:*:*range: >=2.5.0,<=2.6.1
- (no CPE)range: 2.5 - 2.6.1
- (no CPE)range: 2.5
Patches
Vulnerability mechanics
References
2- www.ibm.com/support/pages/node/6506461nvdPatchVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/209566nvdVDB EntryVendor Advisory
News mentions
0No linked articles in our index yet.