5.8
CVE-2014-4831
- EPSS 0.99%
- Veröffentlicht 28.11.2014 02:59:02
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Quelle psirt@us.ibm.com
- CVE-Watchlists
- Unerledigt
LoginIBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, allow remote attackers to hijack sessions via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Qradar Risk Manager Version7.1.0
Ibm ≫ Qradar Risk Manager Version7.2.0
Ibm ≫ Qradar Risk Manager Version7.2.1
Ibm ≫ Qradar Risk Manager Version7.2.2
Ibm ≫ Qradar Risk Manager Version7.2.3
Ibm ≫ Qradar Risk Manager Version7.2.4
Ibm ≫ Qradar Vulnerability Manager Version7.2.0
Ibm ≫ Qradar Vulnerability Manager Version7.2.1
Ibm ≫ Qradar Vulnerability Manager Version7.2.2
Ibm ≫ Qradar Vulnerability Manager Version7.2.3
Ibm ≫ Qradar Vulnerability Manager Version7.2.4
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.99% | 0.58 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.8 | 8.6 | 4.9 |
AV:N/AC:M/Au:N/C:P/I:P/A:N
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
http://www-01.ibm.com/support/docview.wss?uid=swg21691211
https://exchange.xforce.ibmcloud.com/vulnerabilities/95581