cve/2023/CVE-2023-47727.md

### [CVE-2023-47727](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47727)
![](https://img.shields.io/static/v1?label=Product&message=Cloud%20Pak%20for%20Security&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=QRadar%20Suite%20Software&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=1.10.0.0%3C%3D%201.10.11.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=1.10.12.0%3C%3D%201.10.20.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-1287%20Improper%20Validation%20of%20Specified%20Type%20of%20Input&color=brighgreen)

### Description

IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.20.0 could allow an authenticated user to modify dashboard parameters due to improper input validation.  IBM X-Force ID:  272089.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/fkie-cad/nvd-json-data-feeds