CVE-2016-9725

🗓️ 07 Mar 2017 17:00:00Reported by ibmType

IBM QRadar Incident Forensics 7.2 has Cross-Origin Resource Sharing (CORS) allowing web sites to request resources from external sites

Reporter	Title	Published	Views	Family All 6
IBM Security Bulletins	Release of QRadar 7.2.8 Patch 4 (7.2.8.20170224202650) Updated w/Security Bulletins	10 May 201914:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Incident Forensics is vulnerable to overly permissive CORS access policies (CVE-2016-9725)	16 Jun 201821:50	–	ibm
Cvelist	CVE-2016-9725	7 Mar 201717:00	–	cvelist
EUVD	EUVD-2016-10526	7 Oct 202500:30	–	euvd
NVD	CVE-2016-9725	7 Mar 201717:59	–	nvd
Prion	Cross site scripting	7 Mar 201717:59	–	prion

NVD

Vulners

Node

ibm qradar_security_information_and_event_managerMatch7.2.0

ibm qradar_security_information_and_event_managerMatch7.2.1

ibm qradar_security_information_and_event_managerMatch7.2.2

ibm qradar_security_information_and_event_managerMatch7.2.3

ibm qradar_security_information_and_event_managerMatch7.2.4

ibm qradar_security_information_and_event_managerMatch7.2.5

ibm qradar_security_information_and_event_managerMatch7.2.6

ibm qradar_security_information_and_event_managerMatch7.2.7

ibm qradar_security_information_and_event_managerMatch7.2.8

[
  {
    "product": "QRadar SIEM",
    "vendor": "IBM Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "7.1 MR1"
      },
      {
        "status": "affected",
        "version": "7.1"
      },
      {
        "status": "affected",
        "version": "7.0"
      },
      {
        "status": "affected",
        "version": "7.2"
      },
      {
        "status": "affected",
        "version": "7.1 MR2"
      },
      {
        "status": "affected",
        "version": "7"
      },
      {
        "status": "affected",
        "version": "7.2.3"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/docview.wss
securityfocus	www.securityfocus.com/bid/96530

13 May 2026 00:24Current

5.5Medium risk

Vulners AI Score5.5

CVSS 25

CVSS 35.3

EPSS0.00213

CWE-200