Security Bulletin: IBM QRadar Incident Forensics is vulnerable to session highjacking. (CVE-2015-1994)

Summary IBM QRadar incident forensics authorization cookie is missing the httponly attribute. Vulnerability Details CVE-ID: CVE-2015-1994 Description: IBM Qradar Incident Forensics could allow a remote attacker to obtain sensitive information, caused by the failure to set the httponly attribute f...

Security Bulletin: IBM QRadar Incident Forensics is vulnerable to a cross site scripting attack. (CVE-2015-1995)

Summary Several locations in QRadar Incident Forensics could allow attackers to insert JavaScript thus modifying the UI functionality. Vulnerability Details CVE-ID: CVE-2015-1995 Description: IBM QRadar Incident Forensics is vulnerable to cross-site scripting, caused by improper validation of...

Security Bulletin: Open Source Apache Tomcat as used in IBM QRadar SIEM is vulnerable to a security bypass. (CVE-2014-7810)

Summary Open Source Apache Tomcat Security Manager bypass. Vulnerability Details CVE-ID: CVE-2014-7810 Description: Apache Tomcat could allow a remote attacker to bypass security restrictions, caused by the use of expression language. An attacker could exploit this vulnerability to bypass the...

Security Bulletin: IBM QRadar SIEM is vulnerable to path traversal attack. (CVE-2015-2007)

Summary A Path Traversal attack aims to access files and directories that are stored outside the web root folder. Vulnerability Details CVE-ID: CVE-2015-2007 Description: IBM QRadar could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL...

Security Bulletin: IBM QRadar Incident Forensics 7.2.4 is vulnerable to a cross site scripting vulnerability. (CVE-2015-1919)

Summary A cross site scripting vulnerability was found to affect IBM QRadar Incident Forensics. Vulnerability Details CVEID: CVE-2015-1919 DESCRIPTION: IBM QRadar Incident Forensics is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker coul...

Kayson Group phpGrid Directory Traversal Vulnerability

Kayson Group phpGrid is a suite of development tools for rapid development of MIS systems from Kayson Group. A directory traversal vulnerability exists in Kayson Group phpGrid versions prior to 7.2.5. A remote attacker can exploit this vulnerability by uploading a specially crafted file with a...

CVE-2015-1919

IBM QRadar Incident Forensics is affected by a cross-site scripting (XSS) vulnerability (CVE-2015-1919) in versions up to 7.2.4. The issue arises from improper validation of user-supplied input, allowing a remote attacker to craft a URL that, when clicked, executes script in the victim’s browser ...