CVE-2014-4828: IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 allows remote attackers to conduct clickjacking attacks via a crafted HTTP request

Unscored severity · published Oct 19, 2014

CVE-2014-4828

IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 allows remote attackers to conduct clickjacking attacks via a crafted HTTP request

–

CVSS

1.3%

EPSS

On KEV

Description

IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 allows remote attackers to conduct clickjacking attacks via a crafted HTTP request.

Exploitation

Is it being used?

Exploit prediction (EPSS)1.3% · higher than 70% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Qradar Security Information And Event Manager · Ibm

7.1.0; 7.2.0 · source: NVD

Affected product

Qradar Security Information And Event Manager

Ibm

All Qradar Security Information And Event Manager CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2014-4828

CVE.org

https://www.cve.org/CVERecord?id=CVE-2014-4828

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21686478

exchange.xforce.ibmcloud.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/95578

More from Qradar Security Information And Event Manager

9.8

CVE-2014-7169

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

9.8

CVE-2014-6271

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

9.8

CVE-2026-10025

IBM QRadar SIEM has an XML External Entity (XXE) injection vulnerability

9.8

CVE-2021-38869

IBM QRadar SIEM 7.3, 7.4, and 7.5 in some situations may not automatically log users out after they exceede their idle timeout

9.8

CVE-2020-4979

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to insecure inter-deployment communication