Not rated
CVE-2016-9972 IBM QRadar 7.2 and 7.3 could allow a remote attacker to obtain sensitive information, caused by the failure to…
Description
IBM QRadar 7.2 and 7.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 120208.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Security QRadar SIEM | 7.3 | No fix stated |
| Security QRadar SIEM | 7.2 | No fix stated |
Other CVEs of Security QRadar SIEM
The 19 CVEs of Security QRadar SIEM →
CVE-2022-34352
IBM QRadar SIEM 7.5.0 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific…
6.5
Medium
CVE-2023-26274
IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting
4.6
Medium
CVE-2023-26276
IBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt…
5.9
Medium
CVE-2023-26273
IBM QRadar SIEM 7.5.0 could allow an authenticated user to perform unauthorized actions due to hazardous input…
4.3
Medium