cbcvebase.
CVE-2015-1989
published 2015-11-08

CVE-2015-1989: SQL injection vulnerability in IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 allows remote authenticated users to execute arbitrary SQL…

PriorityP336medium6.5CVSS 2.0
AVNACLAuSCPIPAP
EPSS
0.99%
58.5th percentile
SQL injection vulnerability in IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Affected

6 ranges
VendorProductVersion rangeFixed in
ibmsecurity_qradar_incident_forensics
ibmsecurity_qradar_incident_forensics
ibmsecurity_qradar_incident_forensics
ibmsecurity_qradar_incident_forensics
ibmsecurity_qradar_incident_forensics
ibmsecurity_qradar_incident_forensics
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.