CVE-2015-2011

CVE-2015-2011 describes a critical command injection vulnerability in the xmlrpc.cgi Webmin script within IBM QRadar SIEM versions 7.1 MR2 (before Patch 11 IF02) and 7.2.x (before 7.2.5 Patch 4). This flaw allows remote authenticated users to execute arbitrary commands with root privileges. The vulnerability carries a CVSS score of 9.0, indicating high severity due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Successful exploitation grants an attacker full control over the affected system. While there is no evidence of active exploitation (not in KEV or Hot List), and no public exploit code (Metasploit, Nuclei, ExploitDB) is available, the vulnerability has garnered some community discussion. The EPSS score is low, suggesting a low probability of exploitation in the wild despite its high theoretical impact.