Security Bulletin: IBM QRadar SIEM is vulnerable to SQL Injection. (CVE-2016-2873)

Summary IBM QRadar SIEM was found to be vulnerable to SQL injection. Vulnerability Details CVE-ID: CVE-2016-2873 Description: IBM QRadar is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete...

CVE-2016-2873

IBM QRadar SIEM (7.1 before MR2 Patch 13 and 7.2 before 7.2.7) is affected by CVE-2016-2873, a SQL injection vulnerability. A remote authenticated attacker could send specially crafted SQL statements to access or manipulate data in the back-end database. The IBM Security Bulletin (and related rec...