Security Bulletin: IBM QRadar SIEM contains vulnerable components and libraries. (CVE-2015-0176, CVE-2016-0379, CVE-2016-3052)

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. Vulnerability Details CVEID: CVE-2015-0176 DESCRIPTION: IBM WebSphere MQ is vulnerable to reflected cross-site scripting, caused by improper validation of...

CVE-2016-3052

IBM WebSphere MQ can reveal passwords in cleartext over the network under nonstandard configurations, enabling MITM exposure. The IBM bulletin references CVE-2016-3052 among vulnerable MQ components and provides remediation via QRadar MQJMS protocol fixes (e.g., 7.3.0-QRADAR-PROTOCOL-MQJMS-7.3-20...