Security Bulletin: IBM QRadar SIEM is vulnerable to SQL injection (CVE-2016-9728)

Summary IBM QRadar SIEM allows users to arbitrarily modify backend SQL statements which may lead to data leakage and even command execution in certain scenarios. Vulnerability Details CVEID: CVE-2016-9728 DESCRIPTION: IBM QRadar is vulnerable to SQL injection. A remote attacker could send...

CVE-2016-9728

IBM Qradar 7.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, information in the back-end database. IBM Reference : 1999543...

CVE-2016-9728

CVE-2016-9728 affects IBM QRadar SIEM 7.2.x. The vulnerability is an SQL injection in QRadar SIEM that could allow a remote attacker to view data in the backend database. IBM’s security bulletin and the NVD describe a CVSS v3 base score of 7.5 (HIGH) with network access, no authentication, and im...