CVE-2024-51462 PUBLISHED CVSS 4 MEDIUM

IBM QRadar WinCollect Agent 10.0.0 through 10.1.12 could allow a remote attacker to inject XML data into parameter values due to improper input validation of assumed immutable data.

EPSS 0.09% · 25.5th percentile

Risk Scores

CVSS v3.1
4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS Score
0.09%
25.5th percentile

Affected Products

VendorProductVersions
ibmqradar_wincollect10.0
IBMQRadar WinCollect Agent10.0.0

Timeline

References

Open in Interactive Console →