CVE-2016-9727

HIGH

IBM QRadar Incident Forensics - Authenticated Remote Command Execution

Title source: llm
STIX 2.1

Description

IBM QRadar 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM Reference #: 1999542.

References (1)

Core 1
Core References
Patch, Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21999542

Scores

CVSS v3 8.5
EPSS 0.0038
EPSS Percentile 59.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Details

CWE
CWE-20
Status published
Products (25)
ibm/qradar_incident_forensics 7.2.0
ibm/qradar_incident_forensics 7.2.1
ibm/qradar_incident_forensics 7.2.2
ibm/qradar_incident_forensics 7.2.3
ibm/qradar_incident_forensics 7.2.4
ibm/qradar_incident_forensics 7.2.5
ibm/qradar_incident_forensics 7.2.6
ibm/qradar_incident_forensics 7.2.7
ibm/qradar_incident_forensics 7.2.8
ibm/qradar_security_information_and_event_manager 7.2.0
... and 15 more
Published Mar 07, 2017
Tracked Since Feb 18, 2026