CVE-2016-9730

MEDIUM

IBM QRadar Incident Forensics 7.2 - Cross-Site Request Forgery

Title source: llm

Description

IBM QRadar Incident Forensics 7.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference #: 1999549.

References (1)

Core 1

Core References

Patch, Vendor Advisory x_refsource_confirm

http://www.ibm.com/support/docview.wss?uid=swg21999549

Scores

CVSS v3 4.3

EPSS 0.0011

EPSS Percentile 28.5%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Details

CWE

CWE-352

Status published

Products (25)

ibm/qradar_incident_forensics 7.2.0

ibm/qradar_incident_forensics 7.2.1

ibm/qradar_incident_forensics 7.2.2

ibm/qradar_incident_forensics 7.2.3

ibm/qradar_incident_forensics 7.2.4

ibm/qradar_incident_forensics 7.2.5

ibm/qradar_incident_forensics 7.2.6

ibm/qradar_incident_forensics 7.2.7

ibm/qradar_incident_forensics 7.2.8

ibm/qradar_security_information_and_event_manager 7.2.0

... and 15 more

Published Mar 07, 2017

Tracked Since Feb 18, 2026