CVE-2015-1999: IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 places session IDs in https URLs, which a...

Security readout for executives and security teams

IBM QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 exposed session IDs by placing them in HTTPS URLs. That can leak authenticated sessions into logs, Referer records, or browser history. The main concern is unauthorized account/session access if those records are readable by attackers or overly broad internal users. Exposure is limited to organizations running IBM Security QRadar Incident Forensics 7.2.x earlier than 7.2.5 Patch 5. Risk increases where web logs, proxy logs, SIEM exports, browser history, or Referer data are broadly accessible or retained for long periods. Treat as a targeted confidentiality and session-control issue, not a mass internet worm risk based on available evidence. Prioritize remediation if the product is still deployed or if historical logs may contain session-bearing URLs accessible to many users. Mitigation focus: Confirm whether QRadar Incident Forensics 7.2.x is deployed.; Apply IBM's fixed level: 7.2.5 Patch 5 or later.; Review IBM advisory guidance before changing production systems..

Prepared

Jun 13, 2026, 21:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.