CVE-2014-4825

IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 does not properly implement secure connections, which allows man-in-the-middle attackers to discover cleartext credentials via unspecified vectors...

CVE-2014-4827

CVE-2014-4827 is an XSS vulnerability affecting IBM QRadar-related products. The vulnerability arises from improper validation of user-supplied input, allowing a remote attacker to craft a URL that injects arbitrary web script or HTML in QRadar’s web interface. Affected products include IBM QRada...