CVE-2017-1722: IBM Qradar Security Information And Event Manager

Medium severity, CVSS 6.3. EPSS: 1.1% chance of exploitation in the next 30 days.

IBM Security QRadar SIEM 7.2 and 7.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 134811.

Affected products

• IBM Qradar Security Information And Event Manager: from 7.2.0, before 7.2.8 (fixed in 7.2.8); version 7.2.8 only; version 7.3.0 only

Published 2018-04-26. Last modified 2026-06-17.