CVE-2017-1457: IBM QRadar Network Security 5.4 is vulnerable to cross-site scripting.

Security readout for executives and security teams

IBM QRadar Network Security 5.4 has a Web UI cross-site scripting flaw. A user could place JavaScript into the interface, changing what another trusted session sees or does and potentially exposing credentials. The sources do not provide a CVSS score or confirm active exploitation. Exposure is limited to environments running IBM QRadar Network Security 5.4, particularly where the Web UI is reachable by administrators or other trusted users. The bundle does not identify other versions or products as affected. Treat this as a targeted security hygiene item for legacy QRadar Network Security deployments. It is not KEV-listed in the bundle, but credential exposure inside a security appliance interface warrants prompt validation and vendor-guided remediation. Mitigation focus: Confirm whether IBM QRadar Network Security 5.4 is deployed.; Review IBM advisory swg22007550 for official fixes or mitigations.; Apply IBM-published remediation when confirmed applicable..

Prepared

Jun 12, 2026, 21:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.