{"api_version":"1","generated_at":"2026-07-23T07:09:38+00:00","cve":"CVE-2014-0835","urls":{"html":"https://cve.report/CVE-2014-0835","api":"https://cve.report/api/cve/CVE-2014-0835.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2014-0835","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-0835"},"summary":{"title":"CVE-2014-0835","description":"Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify console Auto Update settings.","state":"PUBLISHED","assigner":"ibm","published_at":"2014-01-30 05:17:46","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-352","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://seclists.org/fulldisclosure/2014/Jan/166","name":"http://seclists.org/fulldisclosure/2014/Jan/166","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Full Disclosure: ADV: IBM QRadar SIEM","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/102554","name":"http://osvdb.org/102554","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21663066","name":"http://www-01.ibm.com/support/docview.wss?uid=swg21663066","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"IBM Security Bulletin: Multiple vulnerabilities in IBM QRadar SIEM (CVE-2014-0838, CVE-2014-0835, CVE-2014-0836, CVE-2014-0837) - United States","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/65127","name":"http://www.securityfocus.com/bid/65127","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM QRadar Security Information and Event Manager Multiple Security Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/90678","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/90678","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/56653","name":"http://secunia.com/advisories/56653","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Security Advisory SA56653 - IBM QRadar SIEM Multiple Vulnerabilities - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://thomaspollet.blogspot.be/2014/01/ibm-qradar-siem-csrf-xss-mitm-rce.html","name":"http://thomaspollet.blogspot.be/2014/01/ibm-qradar-siem-csrf-xss-mitm-rce.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Thomas Pollet: IBM QRadar SIEM CSRF - XSS - MITM - RCE","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0835","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0835","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2014","cve_id":"835","vulnerable":"1","versionEndIncluding":"7.2.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"qradar_security_information_and_event_manager","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2014","cve_id":"835","cve":"CVE-2014-0835","epss":"0.002110000","percentile":"0.433580000","score_date":"2026-05-04","updated_at":"2026-05-05 00:07:32"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T09:27:20.243Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"65127","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/65127"},{"name":"ibm-qradar-cve20140835-csrf(90678)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/90678"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://thomaspollet.blogspot.be/2014/01/ibm-qradar-siem-csrf-xss-mitm-rce.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21663066"},{"name":"102554","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/102554"},{"name":"20140124 ADV: IBM QRadar SIEM","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"],"url":"http://seclists.org/fulldisclosure/2014/Jan/166"},{"name":"56653","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/56653"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2014-01-29T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify console Auto Update settings."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-28T12:57:01.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","shortName":"ibm"},"references":[{"name":"65127","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/65127"},{"name":"ibm-qradar-cve20140835-csrf(90678)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/90678"},{"tags":["x_refsource_MISC"],"url":"http://thomaspollet.blogspot.be/2014/01/ibm-qradar-siem-csrf-xss-mitm-rce.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21663066"},{"name":"102554","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/102554"},{"name":"20140124 ADV: IBM QRadar SIEM","tags":["mailing-list","x_refsource_FULLDISC"],"url":"http://seclists.org/fulldisclosure/2014/Jan/166"},{"name":"56653","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/56653"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","ID":"CVE-2014-0835","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify console Auto Update settings."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"65127","refsource":"BID","url":"http://www.securityfocus.com/bid/65127"},{"name":"ibm-qradar-cve20140835-csrf(90678)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/90678"},{"name":"http://thomaspollet.blogspot.be/2014/01/ibm-qradar-siem-csrf-xss-mitm-rce.html","refsource":"MISC","url":"http://thomaspollet.blogspot.be/2014/01/ibm-qradar-siem-csrf-xss-mitm-rce.html"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21663066","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21663066"},{"name":"102554","refsource":"OSVDB","url":"http://osvdb.org/102554"},{"name":"20140124 ADV: IBM QRadar SIEM","refsource":"FULLDISC","url":"http://seclists.org/fulldisclosure/2014/Jan/166"},{"name":"56653","refsource":"SECUNIA","url":"http://secunia.com/advisories/56653"}]}}}},"cveMetadata":{"assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","assignerShortName":"ibm","cveId":"CVE-2014-0835","datePublished":"2014-01-30T02:00:00.000Z","dateReserved":"2014-01-06T00:00:00.000Z","dateUpdated":"2024-08-06T09:27:20.243Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2014-01-30 05:17:46","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-352","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"7.2.0","matchCriteriaId":"E02AEE53-2DD0-4BC3-A7F1-750FB8635362"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2014","CveId":"835","Ordinal":"1","Title":"CVE-2014-0835","CVE":"CVE-2014-0835","Year":"2014"},"notes":[{"CveYear":"2014","CveId":"835","Ordinal":"1","NoteData":"Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify console Auto Update settings.","Type":"Description","Title":"CVE-2014-0835"},{"CveYear":"2014","CveId":"835","Ordinal":"2","NoteData":"2014-01-29","Type":"Other","Title":"Published"},{"CveYear":"2014","CveId":"835","Ordinal":"3","NoteData":"2017-08-28","Type":"Other","Title":"Modified"}]}}}