CVE-2014-4829

IBM Security QRadar SIEM/QRadar Risk Mgr <7.1 MR2-7.2.4 Patch 1 - CSRF

Title source: llm
STIX 2.1

Description

Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/95579
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21691211

Scores

EPSS 0.0056
EPSS Percentile 42.6%

Details

CWE
CWE-352
Status published
Products (17)
ibm/qradar_risk_manager 7.1.0
ibm/qradar_risk_manager 7.2.0
ibm/qradar_risk_manager 7.2.1
ibm/qradar_risk_manager 7.2.2
ibm/qradar_risk_manager 7.2.3
ibm/qradar_risk_manager 7.2.4
ibm/qradar_security_information_and_event_manager 7.1.0
ibm/qradar_security_information_and_event_manager 7.2.0
ibm/qradar_security_information_and_event_manager 7.2.1
ibm/qradar_security_information_and_event_manager 7.2.2
... and 7 more
Published Nov 28, 2014
Tracked Since Feb 18, 2026