CVE-2017-1723: IBM Security QRadar SIEM 7.2 and 7.3 could allow a remote attacker to traverse directories on the system.

Security readout for executives and security teams

IBM QRadar SIEM 7.2 and 7.3 had a directory traversal flaw that could let a remote attacker view arbitrary files by abusing crafted URL paths. For executives, the concern is sensitive SIEM data exposure from a system that centralizes security telemetry. Exposure is limited to organizations running IBM Security QRadar SIEM 7.2 or 7.3, especially where QRadar web interfaces are reachable by untrusted networks or broad internal user groups. Treat this as an exposure review item for any legacy QRadar environment. Business urgency rises if affected QRadar interfaces are externally reachable or widely accessible internally, because arbitrary file viewing could expose security data or configuration details. Mitigation focus: Review IBM support advisory swg22015804 for official fixes or workarounds.; Confirm whether any QRadar 7.2 or 7.3 systems remain in service.; Restrict QRadar administrative access to trusted networks and authorized users..

Prepared

Jun 7, 2026, 13:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.