Security Bulletin: IBM QRadar SIEM is vulnerable to SQL Injection. (CVE-2016-2873)

Summary

IBM QRadar SIEM was found to be vulnerable to SQL injection.

Vulnerability Details

CVE-ID: CVE-2016-2873 **Description:**IBM QRadar is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. **CVSS Base Score:**7.6 **CVSS Temporal Score:**See https://exchange.xforce.ibmcloud.com/vulnerabilities/112835 for the current score **CVSS Environmental Score:***Undefined CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Affected Products and Versions

· IBM QRadar SIEM 7.2.n

· IBM QRadar SIEM 7.1.n

Remediation/Fixes

· QRadar / QRM / QVM / QRIF 7.2.7

· IBM QRadar SIEM 7.1 MR2 Patch 13

Workarounds and Mitigations

None