Product
IBM QRadar versions 7.5.0 through 7.5.0 Update Pack 16 Interim Fix 02, and 7.6.0.0 through 7.6.0.5 are vulnerable to Reflected XSS. Triggering the vulnerability requires an authenticated user to open a specifically crafted URL.