Description
IBM Qradar 7.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, information in the back-end database. IBM Reference #: 1999543.
References (1)
Core 1
Core References
Patch, Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21999543
Scores
CVSS v3
7.5
EPSS
0.0026
EPSS Percentile
49.4%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-89
Status
published
Products (16)
ibm/qradar_security_information_and_event_manager
7.2.0
ibm/qradar_security_information_and_event_manager
7.2.1
ibm/qradar_security_information_and_event_manager
7.2.2
ibm/qradar_security_information_and_event_manager
7.2.3
ibm/qradar_security_information_and_event_manager
7.2.4
ibm/qradar_security_information_and_event_manager
7.2.5
ibm/qradar_security_information_and_event_manager
7.2.6
ibm/qradar_security_information_and_event_manager
7.2.7
ibm/qradar_security_information_and_event_manager
7.2.8
IBM Corporation/QRadar SIEM
7
... and 6 more
Published
Mar 07, 2017
Tracked Since
Feb 18, 2026