CVE-2014-0835: Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remo...

Security readout for executives and security teams

This is a CSRF issue in IBM Security QRadar SIEM 7.2 MR1 and earlier. If an administrator is authenticated, a remote attacker could abuse that trusted browser session to change console Auto Update settings. The business concern is loss of update-control integrity on a security monitoring platform, not direct data theft from the CVE description. Exposure is likely limited to organizations still running IBM Security QRadar SIEM 7.2 MR1 or earlier. Risk is most relevant where administrators access the QRadar console from browsers that may also reach untrusted content. Treat as a targeted operational integrity risk for legacy QRadar environments. Prioritize validation if QRadar is still deployed, especially old or unsupported versions. If no affected version exists, no urgent action is indicated beyond recordkeeping. Mitigation focus: Review IBM advisory guidance for the affected QRadar release.; Upgrade or patch QRadar if IBM identifies a fixed release.; Restrict administrative console access to trusted networks and users..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.