IBM Qradar Network Insights vulnerabilities

2 CVEs affecting IBM Qradar Network Insights, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-1724, published 2018-04-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-1723, published 2018-04-26. Medium severity, CVSS 6.5. EPSS: 2.5% chance of exploitation in the next 30 days. IBM Security QRadar SIEM 7.2 and 7.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../)…
CVE-2017-1724, published 2018-04-26. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. IBM Security QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality…