CVE-2016-9725

Published: Mar 7, 2017Modified: May 13, 2026

5.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

IBM QRadar Incident Forensics 7.2 allows for Cross-Origin Resource Sharing (CORS), which is a mechanism that allows web sites to request resources from external sites, avoiding the need to duplicate them. IBM Reference #: 1999539.

Affected (9)

Products: Ibm: Qradar Security Information And Event Manager

Ibm

1 product

Qradar Security Information And Event Manager

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Ibm Qradar Security Information And Event Manager	Version 7.2.0
Ibm Qradar Security Information And Event Manager	Version 7.2.1
Ibm Qradar Security Information And Event Manager	Version 7.2.2
Ibm Qradar Security Information And Event Manager	Version 7.2.3
Ibm Qradar Security Information And Event Manager	Version 7.2.4
Ibm Qradar Security Information And Event Manager	Version 7.2.5
Ibm Qradar Security Information And Event Manager	Version 7.2.6
Ibm Qradar Security Information And Event Manager	Version 7.2.7
Ibm Qradar Security Information And Event Manager	Version 7.2.8

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

http://www.ibm.com/support/docview.wss?uid=swg21999539

Source: psirt@us.ibm.com

PatchVendor Advisory

http://www.securityfocus.com/bid/96530

Source: psirt@us.ibm.com

http://www.ibm.com/support/docview.wss?uid=swg21999539

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/96530

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.