Lucene search

[email protected]CVE-2014-4828

HistoryOct 19, 2014 - 1:55 a.m.

CVE-2014-4828

2014-10-1901:55:00

CWE-20

[email protected]

web.nvd.nist.gov

ibm

security

qradar

siem

qrm

qvm

vulnerability

cve-2014-4828

clickjacking

6.6 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

36.2%

JSON

IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 allows remote attackers to conduct clickjacking attacks via a crafted HTTP request.

CPENameOperatorVersion
ibm:qradar_security_information_and_event_manageribm qradar security information and event managereq7.2.0
ibm:qradar_security_information_and_event_manageribm qradar security information and event managereq7.1.0

CPE	Name	Operator	Version
ibm:qradar_security_information_and_event_manager	ibm qradar security information and event manager	eq	7.2.0
ibm:qradar_security_information_and_event_manager	ibm qradar security information and event manager	eq	7.1.0

References

www-01.ibm.com/support/docview.wss?uid=swg21686478

exchange.xforce.ibmcloud.com/vulnerabilities/95578

6.6 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

36.2%

JSON

Related for CVE-2014-4828

prion1 cvelist1 ibm1