IBM QRadar versions 7.5.0 through 7.5.0 Update Pack 16 Interim Fix 02, and 7.6.0.0 through 7.6.0.5 contain a reflected cross-site scripting (XSS) vulnerability. An attacker can exploit this by tricking an authenticated user into opening a specially crafted URL, potentially leading to high impact on confidentiality and integrity.