Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1 and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.