CVE-2014-3062 : Unspecified vulnerability in IBM Security QRadar SIEM 7.1 MR2 and 7.2 MR2 allows

Unspecified vulnerability in IBM Security QRadar SIEM 7.1 MR2 and 7.2 MR2 allows remote attackers to execute arbitrary code via unknown vectors.

Published 2014-09-27 10:55:05

Updated 2025-04-12 10:46:41

Source IBM Corporation

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2014-3062

IBM » Qradar Security Information And Event Manager » Version: 7.1.0
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.0:*:*:*:*:*:*:*
Matching versions
IBM » Qradar Security Information And Event Manager » Version: 7.2.0
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.0:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

7.35%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 91 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

https://exchange.xforce.ibmcloud.com/vulnerabilities/93540

IBM Security Qradar SIEM code execution CVE-2014-3062 Vulnerability Report
http://www-01.ibm.com/support/docview.wss?uid=swg21683609

IBM Security Bulletin: Unspecified weaknesses in the QRadar appliance 7.1 MR2 and 7.2 MR2 could allow an external attacker to obtain root access to the system. (CVE-2014-3062)
Vendor Advisory

Jump to