CVE-2018-1927: IBM StoredIQ 7.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malic...

Security readout for executives and security teams

IBM StoredIQ 7.6 has a cross-site request forgery flaw. If a trusted user is tricked into interacting with malicious content while authenticated, unauthorized actions could be sent to StoredIQ as that user. The main business risk is unauthorized change, not data theft or outage based on the supplied CVSS vector. Exposure is limited to environments running IBM StoredIQ 7.6 where users can reach the web application and maintain trusted sessions. Risk is higher for administrative or high-privilege users who browse external content while authenticated. Prioritize this for organizations still running StoredIQ 7.6, especially where administrators use the web interface. It is not supported by the supplied sources as an active exploitation emergency, but the integrity impact justifies remediation within normal medium-severity SLA. Mitigation focus: Identify whether IBM StoredIQ 7.6 is deployed.; Review IBM advisory 10741605 for official fixes or mitigation guidance.; Apply IBM-recommended updates or compensating controls..

Prepared

May 24, 2026, 20:29 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.