Command injection

IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 executes unspecified processes at an incorrect privilege level, which makes it easier for remote authenticated users to obtain root access by leveraging a command-injection issue...

Authorization

IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses cleartext storage for unspecified passwords, which allows local users to obtain sensitive information by reading a configuration file...

Authorization

IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 mishandles authorization, which allows remote authenticated users to obtain sensitive information via unspecified vectors...

Sql injection

SQL injection vulnerability in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2016-2869

Multiple cross-site scripting XSS vulnerabilities in the UI in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allow remote authenticated users to inject arbitrary web script or HTML via crafted fields in a URL...

CVE-2016-2869

Multiple cross-site scripting XSS vulnerabilities in the UI in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allow remote authenticated users to inject arbitrary web script or HTML via crafted fields in a URL...

CVE-2016-2873

IBM QRadar SIEM (7.1 before MR2 Patch 13 and 7.2 before 7.2.7) is affected by CVE-2016-2873, a SQL injection vulnerability. A remote authenticated attacker could send specially crafted SQL statements to access or manipulate data in the back-end database. The IBM Security Bulletin (and related rec...

CVE-2016-2877

IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses weak permissions for unspecified directories under the web root, which allows local users to modify data by writing to a file...

CVE-2016-2869

CVE-2016-2869: IBM QRadar SIEM UI is vulnerable to Cross‑Site Scripting due to improper validation of user-supplied input. A remote authenticated user could inject script via crafted URL fields in QRadar UI. Affected products/versions: IBM QRadar 7.1 (before MR2 Patch 13) and 7.2 (before 7.2.7). ...

CVE-2016-2871

IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses cleartext storage for unspecified passwords, which allows local users to obtain sensitive information by reading a configuration file...

CVE-2016-2876

IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 executes unspecified processes at an incorrect privilege level, which makes it easier for remote authenticated users to obtain root access by leveraging a command-injection issue...

CVE-2016-2878

Multiple cross-site request forgery CSRF vulnerabilities in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allow remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2016-2869

Multiple cross-site scripting XSS vulnerabilities in the UI in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allow remote authenticated users to inject arbitrary web script or HTML via crafted fields in a URL...

CVE-2016-2876

IBM QRadar SIEM is affected by CVE-2016-2876, where an authenticated user can inject OS commands that execute with root privileges due to privilege elevation in certain processes. Affected versions include QRadar 7.1 before MR2 Patch 13 and 7.2 before 7.2.7. The root-cause involves commands being...

CVE-2016-2877

CVE-2016-2877 affects IBM QRadar SIEM 7.1 (before MR2 Patch 13) and 7.2 (before 7.2.7). Root cause: incorrect/weak permissions on certain web root directories allow a local user to write to files, potentially modifying data in web-accessible areas. Remediation: upgrade to QRadar 7.1 MR2 Patch 13 ...

CVE-2016-2874

IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 mishandles authorization, which allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2016-2874

The CVE-2016-2874 issue affects IBM QRadar SIEM (versions 7.1 prior to MR2 Patch 13 and 7.2 prior to 7.2.7). Affected component/area: authorization checks; underlying root cause enables bypass of product authorization rules, allowing remote authenticated users to access information they should no...

CVE-2016-2878

CVE-2016-2878 affects IBM QRadar SIEM (7.1 before MR2 Patch 13 and 7.2 before 7.2.7). The vulnerability is described as cross-site request forgery (CSRF) due to improper validation, allowing an attacker to hijack authentication for requests that can inject XSS sequences. The in-range impact inclu...

CVE-2016-2873

SQL injection vulnerability in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2016-2871

IBM QRadar SIEM is affected by CVE-2016-2871. The connected IBM bulletin confirms that QRadar stores some passwords in clear text in configuration files, enabling a local attacker to obtain sensitive information. Affected versions are QRadar 7.1 before MR2 Patch 13 and 7.2 before 7.2.7. Remediati...