CVSS: 7.5EPSS: 0%CPEs: 7EXPL: 0CVE-2018-1647
https://notcve.org/view.php?id=CVE-2018-1647
IBM QRadar Incident Forensics 7.2 and 7.3 does not properly restrict the size or amount of resources requested which could allow an unauthenticated user to cause a denial of service. IBM X-Force ID: 144650. IBM QRadar Incident Forensics 7.2 y 7.3 no restringe correctamente el tamaño o la cantidad de recursos solicitados, lo que podría permitir que un usuario no autenticado provoque una denegación de servicio (DoS). IBM X-Force ID: 144650. • https://exchange.xforce.ibmcloud.com/vulnerabilities/144650 https://www.ibm.com/support/docview.wss?uid=ibm10729705 • CWE-770: Allocation of Resources Without Limits or Throttling •
CVSS: 7.7EPSS: 0%CPEs: 7EXPL: 0CVE-2018-1649
https://notcve.org/view.php?id=CVE-2018-1649
IBM QRadar Incident Forensics 7.2 and 7.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 144655. IBM QRadar Incident Forensics 7.2 y 7.3 podría permitir que un atacante remoto salte directorios en el sistema. Un atacante podría enviar una petición URL especialmente manipulada que contenga secuencias "punto punto" (/../) para visualizar archivos arbitrarios en el sistema. • https://exchange.xforce.ibmcloud.com/vulnerabilities/144655 https://www.ibm.com/support/docview.wss?uid=ibm10729703 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 6.5EPSS: 0%CPEs: 51EXPL: 0CVE-2017-1723
https://notcve.org/view.php?id=CVE-2017-1723
IBM Security QRadar SIEM 7.2 and 7.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 134812. IBM Security QRadar SIEM 7.2 y 7.3 podría permitir que un atacante remoto salte directorios en el sistema. Un atacante podría enviar una petición URL especialmente manipulada que contenga secuencias "punto punto" (/../) para visualizar archivos arbitrarios en el sistema. • http://www.ibm.com/support/docview.wss?uid=swg22015804 https://exchange.xforce.ibmcloud.com/vulnerabilities/134812 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 6.1EPSS: 0%CPEs: 85EXPL: 0CVE-2017-1724
https://notcve.org/view.php?id=CVE-2017-1724
IBM Security QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134814. IBM Security QRadar SIEM 7.2 y 7.3 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. • http://www.ibm.com/support/docview.wss?uid=swg22015807 https://exchange.xforce.ibmcloud.com/vulnerabilities/134814 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.0EPSS: 0%CPEs: 18EXPL: 0CVE-2016-9726
https://notcve.org/view.php?id=CVE-2016-9726
IBM QRadar Incident Forensics 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM Reference #: 1999542. IBM QRadar Incident Forensics 7.2 podría permitir a un atacante remoto autenticado ejecutar comandos arbitrarios en el sistema. Enviando una petición especialmente manipulada, un atacante podría explotar esta vulnerabilidad para ejecutar comandos arbitrarios en el sistema. • http://www.ibm.com/support/docview.wss?uid=swg21999542 • CWE-20: Improper Input Validation •