VendorsIBMqradar_incident_forensics7.2.3
Vulnerabilities

IBM QRadar Incident Forensics 7.2.3

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2016-9726
IBM QRadar Incident Forensics 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM Reference #: 1999542.
Published 2017-03-07 · Modified
9.0EPSS 0.023
CVE-2016-9727
IBM QRadar 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM Reference #: 1999542.
Published 2017-03-07 · Modified
8.5EPSS 0.025
CVE-2016-9723
IBM QRadar 7.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999534.
Published 2017-03-07 · Modified
6.1EPSS 0.006
CVE-2017-1133
IBM QRadar 7.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999534.
Published 2017-03-07 · Modified
5.4EPSS 0.005
CVE-2016-9720
IBM QRadar 7.2 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM Reference #: 1999533.
Published 2017-03-07 · Modified
5.3EPSS 0.009
CVE-2016-9730
IBM QRadar Incident Forensics 7.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference #: 1999549.
Published 2017-03-07 · Modified
4.3EPSS 0.003