CVE-2016-9972: IBM QRadar 7.2 and 7.3 could allow a remote attacker to obtain sensitive information, caused by the failure...

Security readout for executives and security teams

IBM QRadar SIEM 7.2 and 7.3 may fail to enforce HSTS, weakening HTTPS protection. A remote attacker positioned between a user and QRadar could use man-in-the-middle techniques to obtain sensitive information. The source bundle does not provide CVSS scoring, confirmed exploitation, or specific fix details. Exposure is likely limited to organizations running IBM Security QRadar SIEM 7.2 or 7.3, especially where users access the console over untrusted or interceptable networks. Treat this as a moderate-priority exposure review for legacy QRadar deployments. It is not listed in KEV, but SIEM consoles handle sensitive security data, so affected versions should be verified and remediated through IBM guidance. Mitigation focus: Review IBM advisory swg22004925 and apply vendor-recommended updates or configuration changes.; Inventory QRadar deployments and prioritize versions 7.2 and 7.3.; Ensure QRadar administrative access is restricted to trusted networks or VPN paths..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.