CVE-2015-1994

CVE-2015-1994 describes a vulnerability in IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5, where the session cookie lacks the HTTPOnly flag. This oversight allows remote attackers to potentially access sensitive information via script access to the cookie. The vulnerability has a CVSS score of 5.0 (medium severity) with an attack vector of network, low complexity, and a potential impact of partial confidentiality loss. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.