Page 2 of 24 results (0.015 seconds)

CVSS: 4.3EPSS: 0%CPEs: 18EXPL: 0

CVE-2016-9730

https://notcve.org/view.php?id=CVE-2016-9730

07 Mar 2017 — IBM QRadar Incident Forensics 7.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference #: 1999549. IBM QRadar Incident Forensics 7.2 es vulnerable a CSRF que podría permitir a un atacante ejecutar acciones maliciosas y no autorizadas transmitidas por un usuario en el que confía el sitio web. Referencia de IBM #: 1999549. • http://www.ibm.com/support/docview.wss?uid=swg21999549 • CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 9.0EPSS: 2%CPEs: 18EXPL: 0

CVE-2016-9726

https://notcve.org/view.php?id=CVE-2016-9726

07 Mar 2017 — IBM QRadar Incident Forensics 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM Reference #: 1999542. IBM QRadar Incident Forensics 7.2 podría permitir a un atacante remoto autenticado ejecutar comandos arbitrarios en el sistema. Enviando una petición especialmente manipulada, un atacante podría explotar esta vulnerabilidad para ejec... • http://www.ibm.com/support/docview.wss?uid=swg21999542 • CWE-20: Improper Input Validation •

CVSS: 6.1EPSS: 0%CPEs: 18EXPL: 0

CVE-2016-9723

https://notcve.org/view.php?id=CVE-2016-9723

07 Mar 2017 — IBM QRadar 7.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999534. IBM QRadar 7.2 es vulnerable a XSS. Esta vulnerabilidad permite a usuarios incristar código JavaScript arbitrario en la interfaz web alterando así la funcionalidad intencionada conduciendo potencialmente a divulgación de credenciales en u... • http://www.ibm.com/support/docview.wss?uid=swg21999534 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 8.5EPSS: 0%CPEs: 18EXPL: 0

CVE-2016-9727

https://notcve.org/view.php?id=CVE-2016-9727

07 Mar 2017 — IBM QRadar 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM Reference #: 1999542. IBM QRadar 7.2 podría permitir a un atacante remoto autenticado ejecutar comandos arbitrarios en el sistema. Enviando una petición especialmente manipulada, un atacante podría explotar esta vulnerabilidad para ejecutar comandos arbitrarios en el sistem... • http://www.ibm.com/support/docview.wss?uid=swg21999542 • CWE-20: Improper Input Validation •

CVSS: 5.4EPSS: 0%CPEs: 18EXPL: 0

CVE-2017-1133

https://notcve.org/view.php?id=CVE-2017-1133

07 Mar 2017 — IBM QRadar 7.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999534. IBM QRadar 7.2 es vulnerable a XSS. Esta vulnerabilidad permite a usuarios incrustar código JavaScript arbitrario en la interfaz web alterando así la funcionalidad intencionada conduciendo potencialmente a divulgación de credenciales en u... • http://www.ibm.com/support/docview.wss?uid=swg21999534 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.3EPSS: 0%CPEs: 14EXPL: 0

CVE-2016-2872

https://notcve.org/view.php?id=CVE-2016-2872

02 Jul 2016 — Directory traversal vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.7 and QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attackers to read arbitrary files via a crafted URL. Vulnerabilidad de salto de directorio en IBM Security QRadar SIEM 7.2.x en versiones anteriores a 7.2.7 y QRadar Incident Forensics 7.2.x en versiones anteriores a 7.2.7 permite leer a atacantes remotos archivos arbitrarios a través de una URL manipulada. • http://www-01.ibm.com/support/docview.wss?uid=swg21985775 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVSS: 6.5EPSS: 0%CPEs: 7EXPL: 0

CVE-2016-2968

https://notcve.org/view.php?id=CVE-2016-2968

02 Jul 2016 — IBM Security QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attackers to bypass authentication, and obtain sensitive information or modify data, via unspecified vectors. IBM Security QRadar Incident Forensics 7.2.x en versiones anteriores a 7.2.7 permite a atacantes remotos eludir la autentificación y obtener información sensible o modificar datos, a través de vectores no especificados. • http://www-01.ibm.com/support/docview.wss?uid=swg21985773 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 6.1EPSS: 0%CPEs: 6EXPL: 0

CVE-2015-1995

https://notcve.org/view.php?id=CVE-2015-1995

08 Nov 2015 — Multiple cross-site scripting (XSS) vulnerabilities in IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 allow remote attackers to inject arbitrary web script or HTML via a crafted URL. Múltiples vulnerabilidades de XSS en IBM Security QRadar Incident Forensics 7.2.x en versiones anteriores a 7.2.5 Patch 5 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada. • http://www-01.ibm.com/support/docview.wss?uid=swg21968326 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 8.8EPSS: 0%CPEs: 6EXPL: 0

CVE-2015-1997

https://notcve.org/view.php?id=CVE-2015-1997

08 Nov 2015 — Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar Vulnerability Manager 7.2.x before 7.2.5 Patch 5 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. Vulnerabilidad CSRF en IBM Security QRadar Vulnerability Manager 7.2.x en versiones anteriores a 7.2.5 Patch 5 permite a atacantes remotos secuestrar la autenticación de usuarios arbitrarios en peticiones que insertan secuencias XSS. • http://www-01.ibm.com/support/docview.wss?uid=swg21970140 • CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 2.4EPSS: 0%CPEs: 6EXPL: 0

CVE-2015-1996

https://notcve.org/view.php?id=CVE-2015-1996

08 Nov 2015 — IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 does not prevent caching of HTTPS responses, which allows physically proximate attackers to obtain sensitive local-cache information by leveraging an unattended workstation. IBM Security QRadar Incident Forensics 7.2.x en versiones anteriores a 7.2.5 Patch 5 no previene el almacenamiento en caché de respuestas HTTPS, lo que permite a atacantes físicamente próximos obtener información sensible de caché local aprovechando una estación de trabaj... • http://www-01.ibm.com/support/docview.wss?uid=swg21970139 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •