CVE-2015-1997

2015-11-0822:00:00

ibm

www.cve.org

AI Score

6.5

Confidence

High

EPSS

0.002

Percentile

52.4%

JSON

Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar Vulnerability Manager 7.2.x before 7.2.5 Patch 5 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

References

www-01.ibm.com/support/docview.wss?uid=swg21970140