CVE-2016-9723: IBM QRadar 7.2 is vulnerable to cross-site scripting.

Security readout for executives and security teams

IBM QRadar SIEM 7.x had a Web UI cross-site scripting flaw that could let a user place JavaScript into the interface. In a trusted QRadar session, that script could alter UI behavior and potentially expose credentials. QRadar is security-critical infrastructure, so remaining legacy deployments deserve attention even without known active exploitation. Exposure is most likely in organizations still running legacy IBM QRadar SIEM 7.x versions with authenticated Web UI access. Risk depends on whether listed versions remain deployed, who can submit content to the UI, and whether vendor remediation from IBM Reference 1999534 has been applied. Treat as a legacy-platform cleanup priority. There is no cited active exploitation, but QRadar is a high-value security console and credential exposure inside it could have outsized operational impact. Confirm whether affected versions still exist and whether IBM remediation was completed. Mitigation focus: Inventory QRadar SIEM deployments and identify listed 7.x versions.; Review IBM Reference 1999534 for vendor-supported remediation guidance.; Prioritize upgrade or patch decisions through IBM support channels..

Prepared

Jun 13, 2026, 06:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.