Improper input validation in IBM Qradar Security Information And Event Manager

CVE-2014-4828

IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 allows remote attackers to conduct clickjacking attacks via a crafted HTTP request.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.013 (66.6th percentile) — read the EPSS interpretation.