Unrated severityNVD Advisory· Published Jan 30, 2014· Updated Apr 29, 2026

CVE-2014-0835

Description

Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify console Auto Update settings.

Affected products

IBM/Qradar Security Information And Event Manager
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:*
Range: <=7.2.0

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www-01.ibm.com/support/docview.wssnvdVendor Advisory
osvdb.org/102554nvd
seclists.org/fulldisclosure/2014/Jan/166nvd
secunia.com/advisories/56653nvd
thomaspollet.blogspot.be/2014/01/ibm-qradar-siem-csrf-xss-mitm-rce.htmlnvd
www.securityfocus.com/bid/65127nvd
exchange.xforce.ibmcloud.com/vulnerabilities/90678nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000