CVE-2014-0835
Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier...
Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify console Auto Update settings.
Exploit likelihood
What each source reports
NVD Score used
Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify console Auto Update settings.
- Record
CVE-2014-0835- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-352
- Updated
- 2026-11-02
CVE List No score
Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify console Auto Update settings.
- Record
CVE-2014-0835- Updated
- 2026-11-02
EUVDEUVD-2014-0865 No score
Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify console Auto Update settings.
- Record
EUVD-2014-0865- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q32f-88r3-9qjv No score
Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier...
Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify console Auto Update settings.
- Record
GHSA-q32f-88r3-9qjv- Weakness
- CWE-352
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-0835 is a medium vulnerability (CVSS 6.8) in Ibm Qradar Security Information And Event Manager, published January 30, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.71%, the 53rd percentile. No source names a fixed version.
References
securityfocus.com/bid/65127
exchange.xforce.ibmcloud.com/vulnerabilities/90678
thomaspollet.blogspot.be/2014/01/ibm-qradar-siem-csrf-xss-mitm-rce.html
www-01.ibm.com/support/docview.wss?uid=swg21663066
osvdb.org/102554
seclists.org/fulldisclosure/2014/Jan/166
secunia.com/advisories/56653
nvd.nist.gov/vuln/detail/CVE-2014-0835
github.com/advisories/GHSA-q32f-88r3-9qjv