Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:patch13:*:*:*:*:*:*

part: a version: 7.2.8 update: patch13

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductQradar Incident Forensics (a672857a-0036-5596-9420-fef9ea8aa13f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1649 vulnerable 2026-06-08 05:11:18.509158 Details available
HIGH (7.7)
IBM QRadar Incident Forensics 7.2 and 7.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 144655.
Published: 2018-10-05T13:00:00.000Z
Updated: 2024-09-16T22:30:58.955Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1647 vulnerable 2026-06-08 05:11:18.498487 Details available
HIGH (7.5)
IBM QRadar Incident Forensics 7.2 and 7.3 does not properly restrict the size or amount of resources requested which could allow an unauthenticated user to cause a denial of service. IBM X-Force ID: 144650.
Published: 2018-10-05T13:00:00.000Z
Updated: 2024-09-16T20:06:14.207Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.