CVE-2016-2874

The CVE-2016-2874 issue affects IBM QRadar SIEM (versions 7.1 prior to MR2 Patch 13 and 7.2 prior to 7.2.7). Affected component/area: authorization checks; underlying root cause enables bypass of product authorization rules, allowing remote authenticated users to access information they should no...

CVE-2016-2877

IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses weak permissions for unspecified directories under the web root, which allows local users to modify data by writing to a file...

CVE-2016-2873

SQL injection vulnerability in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2016-2876

IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 executes unspecified processes at an incorrect privilege level, which makes it easier for remote authenticated users to obtain root access by leveraging a command-injection issue...

CVE-2016-2876

IBM QRadar SIEM is affected by CVE-2016-2876, where an authenticated user can inject OS commands that execute with root privileges due to privilege elevation in certain processes. Affected versions include QRadar 7.1 before MR2 Patch 13 and 7.2 before 7.2.7. The root-cause involves commands being...

CVE-2016-2878

Multiple cross-site request forgery CSRF vulnerabilities in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allow remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2016-2871

IBM QRadar SIEM is affected by CVE-2016-2871. The connected IBM bulletin confirms that QRadar stores some passwords in clear text in configuration files, enabling a local attacker to obtain sensitive information. Affected versions are QRadar 7.1 before MR2 Patch 13 and 7.2 before 7.2.7. Remediati...

CVE-2016-2869

CVE-2016-2869: IBM QRadar SIEM UI is vulnerable to Cross‑Site Scripting due to improper validation of user-supplied input. A remote authenticated user could inject script via crafted URL fields in QRadar UI. Affected products/versions: IBM QRadar 7.1 (before MR2 Patch 13) and 7.2 (before 7.2.7). ...

CVE-2016-2871

IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses cleartext storage for unspecified passwords, which allows local users to obtain sensitive information by reading a configuration file...

CVE-2016-2878

CVE-2016-2878 affects IBM QRadar SIEM (7.1 before MR2 Patch 13 and 7.2 before 7.2.7). The vulnerability is described as cross-site request forgery (CSRF) due to improper validation, allowing an attacker to hijack authentication for requests that can inject XSS sequences. The in-range impact inclu...

CVE-2016-2877

CVE-2016-2877 affects IBM QRadar SIEM 7.1 (before MR2 Patch 13) and 7.2 (before 7.2.7). Root cause: incorrect/weak permissions on certain web root directories allow a local user to write to files, potentially modifying data in web-accessible areas. Remediation: upgrade to QRadar 7.1 MR2 Patch 13 ...

CVE-2016-2869

Multiple cross-site scripting XSS vulnerabilities in the UI in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allow remote authenticated users to inject arbitrary web script or HTML via crafted fields in a URL...

CVE-2016-2873

IBM QRadar SIEM (7.1 before MR2 Patch 13 and 7.2 before 7.2.7) is affected by CVE-2016-2873, a SQL injection vulnerability. A remote authenticated attacker could send specially crafted SQL statements to access or manipulate data in the back-end database. The IBM Security Bulletin (and related rec...

PT-2016-5260

Name of the Vulnerable Software and Affected Versions IBM QRadar SIEM versions 7.1 before MR2 Patch 13 IBM QRadar SIEM versions 7.2 before 7.2.7 Description The issue is related to the mishandling of authorization, allowing remote authenticated users to obtain sensitive information. Recommendatio...

PT-2016-5265

Name of the Vulnerable Software and Affected Versions IBM QRadar SIEM versions 7.1 before MR2 Patch 13 IBM QRadar SIEM versions 7.2 before 7.2.7 QRadar Incident Forensics versions 7.2 before 7.2.7 Description The issue allows remote attackers to bypass intended access restrictions via modified...

PT-2016-5263

Name of the Vulnerable Software and Affected Versions IBM QRadar SIEM versions 7.1 before MR2 Patch 13 IBM QRadar SIEM versions 7.2 before 7.2.7 Description The issue allows local users to modify data by writing to a file due to weak permissions for unspecified directories under the web root...

CVE-2016-2876: Improper Neutralization of Special Elements used in an OS Command

IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 executes unspecified processes at an incorrect privilege level, which makes it easier for remote authenticated users to obtain root access by leveraging a command-injection issue...

PT-2016-5262

Name of the Vulnerable Software and Affected Versions IBM QRadar SIEM versions 7.1 before MR2 Patch 13 IBM QRadar SIEM versions 7.2 before 7.2.7 Description The issue allows remote authenticated users to obtain root access by leveraging a command-injection issue, as unspecified processes are...

PT-2016-5264

Name of the Vulnerable Software and Affected Versions IBM QRadar SIEM versions 7.1 before MR2 Patch 13 IBM QRadar SIEM versions 7.2 before 7.2.7 Description The issue allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences due to multiple...

CVE-2016-2869: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the UI in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allow remote authenticated users to inject arbitrary web script or HTML via crafted fields in a URL...