Volerion logoVolerion
Volerion logoVolerion

IBM Operations Analytics and SmartCloud Analytics Cross-Site Request Forgery Vulnerability

Vulnerability

A cross-site request forgery (CSRF) vulnerability has been identified in IBM Operations Analytics - Log Analysis versions 1.3.5.0 through 1.3.8.3, as well as in IBM SmartCloud Analytics - Log Analysis. This vulnerability allows an attacker to deceive a trusted user into performing unauthorized actions.

Impact

Exploitation of this vulnerability could enable an attacker to perform malicious actions on behalf of an authenticated user, potentially leading to unauthorized changes or data manipulation within the application.

Remediation

Users are advised to upgrade to IBM Operations Analytics - Log Analysis version 1.3.8.3 Interim Fix 1 (1.3.8.3-TIV-IOALA-IF1) or later, available from IBM Fix Central. For upgrade instructions, refer to the README provided with the update.

Added: Feb 4, 2026, 10:37 PM
Updated: Feb 4, 2026, 10:37 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
0.6
exploitability
3.8
remediation
7.7
relevance
2.6
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.