Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2021-10-20	CVE-2021-38896	Cross-site Scripting vulnerability in IBM Qradar Advisor 2.5.0/2.5.1/2.6.1 IBM QRadar Advisor 2.5 through 2.6.1 is vulnerable to cross-site scripting. network low complexity ibm CWE-79	6.1
2020-02-25	CVE-2019-4672	Unspecified vulnerability in IBM Qradar Advisor 1.1/2.5.0 IBM QRadar Advisor 1.1 through 2.5 could allow an unauthorized attacker to obtain sensitive information from specially crafted HTTP requests that could aid in further attacks against the system. network low complexity ibm	5.3