{"id":"CVE-2024-45642","aliases":["EUVD-2024-41547","GHSA-6j5p-p5gv-2c73"],"status":"published","title":"IBM Security ReaQta information disclosure","description":"IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00488,"percentile":0.42335,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-942"],"published":"2024-11-14T12:04:31Z","modified":"2026-06-17T07:54:36Z","products":[{"vendor":"ibm","product":"security reaqta"},{"vendor":"ibm","product":"security_qradar_edr"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7172212","tags":["vendor-advisory","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45642"},{"url":"https://github.com/advisories/GHSA-6j5p-p5gv-2c73"}],"sources":{"cve":[{"id":"CVE-2024-45642","title":"IBM Security ReaQta information disclosure","description":"IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","status":"published","published":"2024-11-14T12:04:31.126Z","modified":"2024-11-14T14:04:51.919Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-942"],"updated_at":"2026-11-02T14:34:08.16279Z"}],"euvd":[{"id":"EUVD-2024-41547","description":"IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","status":"published","published":"2024-11-14T12:04:31Z","modified":"2024-11-14T14:04:51Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:05:00.76838Z"}],"ghsa":[{"id":"GHSA-6j5p-p5gv-2c73","title":"IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. This vulnerability allows a...","description":"IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","status":"published","published":"2024-11-14T12:31:03Z","modified":"2024-11-14T12:31:08Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-942"],"updated_at":"2026-11-02T14:58:50.242407Z"}],"nvd":[{"id":"CVE-2024-45642","description":"IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","status":"published","published":"2024-11-14T12:15:18.323Z","modified":"2026-06-17T07:54:36.357Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-942"],"updated_at":"2026-11-02T14:10:37.281254Z"}]}}