Security Bulletin: IBM QRadar SIEM is vulnerable to a denial of service (CVE-2016-9740)

Summary IBM QRadar SIEM does not properly restrict the size or amount of resources that are requested or influenced by an actor. This weakness can be used to consume more resources than intended. Vulnerability Details CVEID: CVE-2016-9740 DESCRIPTION: IBM QRadar could allow a remote attacker to...

CVE-2016-9740

CVE-2016-9740 affects IBM QRadar SIEM 7.2, where a remote attacker could exhaust server resources due to insufficiently restricted resource size/amount. The vulnerability is classified as a Denial of Service (high impact) with network access and no user interaction required. IBM’s remediation is ...