CVE-2016-9724: IBM QRadar 7.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error...

Security readout for executives and security teams

IBM QRadar SIEM contains an XML processing flaw that could let a remote attacker trigger denial of service or expose highly sensitive information. The public record names affected QRadar 7.x and 7.2.x versions but does not provide CVSS scoring, confirmed exploitation, or detailed remediation in the supplied bundle. Exposure is likely limited to organizations running the listed IBM QRadar SIEM versions, especially where QRadar processes XML from remote or untrusted sources. The exact reachable component or request path is not identified in the supplied sources. Treat this as a high-priority legacy QRadar risk if affected versions remain in use. The combination of sensitive SIEM data and denial-of-service impact is business-significant, but remediation details should be confirmed through IBM guidance. Mitigation focus: Review IBM support advisory 1999537 for fixed levels or interim actions.; Inventory QRadar deployments and identify versions listed as affected.; Restrict remote access to QRadar interfaces that process XML..

Prepared

Jun 13, 2026, 06:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.