Lucene search
K

133 matches found

Vulnrichment
Vulnrichment
added 2024/03/03 3:34 p.m.11 views

CVE-2022-43880 IBM QRadar WinCollect Agent

IBM QRadar WinCollect Agent 10.0 through 10.1.2 could allow a privileged user to cause a denial of service. IBM X-Force ID: 240151...

4.4CVSS6.2AI score0.00169EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/03/03 3:34 p.m.19 views

CVE-2022-43880 IBM QRadar WinCollect Agent

IBM QRadar WinCollect Agent 10.0 through 10.1.2 could allow a privileged user to cause a denial of service. IBM X-Force ID: 240151...

4.4CVSS4.7AI score0.00169EPSS
Exploits0References2
CVE
CVE
added 2024/03/03 3:34 p.m.80 views

CVE-2022-43880

CVE-2022-43880 affects IBM QRadar WinCollect Agent 10.0–10.1.2. The issue is described as a denial of service caused by a vulnerability in the WinCollect Agent, with IBM classifying it as a server-side request forgery (SSRF) type weakness that could be exploited by a privileged user. Affected pro...

4.4CVSS4.5AI score0.00169EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2024/03/03 12:0 a.m.3 views

IBM QRadar WinCollect Agent 资源管理错误漏洞

IBM QRadar WinCollect Agent is an agent program from International Business Machines IBM for collecting and sending Windows event logs. A resource management error vulnerability exists in IBM QRadar WinCollect Agent that stems from vulnerability to server-side request forgery attacks. No detailed...

4.4CVSS6.7AI score0.00169EPSS
Exploits0References3
NCSC
NCSC
added 2024/02/19 12:0 a.m.13 views

Vulnerabilities fixed in IBM Qradar

IBM has fixed vulnerabilities in Qradar and underlying components such as SIEM, Wincollect and Case Manager. A malicious person can exploit the vulnerabilities to launch attacks that can lead to the following categories of damage: Cross-Site Request Forgery XSRF. Cross-Site Scripting XSS...

9.8CVSS7AI score0.99999EPSS
Exploits62
BDU FSTEC
BDU FSTEC
added 2023/12/01 12:0 a.m.3 views

The vulnerability of the event forwarding mechanism in IBM QRadar WinCollect Agent lies in the lack of mechanisms for encoding or shielding output data. This allows attackers to perform arbitrary actions.

The vulnerability of the event forwarding mechanism in IBM QRadar WinCollect Agent is related to the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

3.3CVSS7.2AI score0.00217EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:0 a.m.2 views

The vulnerability of the IBM QRadar WinCollect Agent’s event forwarding mechanism, related to insufficient protection of operational data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the event forwarding mechanism in IBM QRadar WinCollect Agent is related to insufficient protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

3.3CVSS5.6AI score0.00595EPSS
Exploits0References4Affected Software1
CNVD
CNVD
added 2023/11/27 12:0 a.m.5 views

IBM QRadar WinCollect Agent Code Issue Vulnerability

IBM QRadar WinCollect Agent is an agent program from International Business Machines IBM for collecting and sending Windows event logs. A code issue vulnerability exists in IBM QRadar WinCollect Agent versions 10.0 through 10.1.7 that stems from improper coding. An attacker could exploit the...

7.8CVSS6.6AI score0.00217EPSS
Exploits0References1
CNVD
CNVD
added 2023/11/27 12:0 a.m.7 views

IBM QRadar WinCollect Agent Information Disclosure Vulnerability (CNVD-2023-9528785)

IBM QRadar WinCollect Agent is an agent program from International Business Machines IBM for collecting and sending Windows event logs. An information disclosure vulnerability exists in IBM QRadar WinCollect Agent. The vulnerability stems from the application's inadequate protection of sensitive...

4.9CVSS6AI score0.00595EPSS
Exploits0References1
OSV
OSV
added 2023/11/24 12:15 a.m.1 views

CVE-2023-26279

IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a local user to perform unauthorized actions due to improper encoding. IBM X-Force ID: 248160...

7.8CVSS5.8AI score0.00217EPSS
Exploits0References2
NVD
NVD
added 2023/11/24 12:15 a.m.15 views

CVE-2023-26279

IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a local user to perform unauthorized actions due to improper encoding. IBM X-Force ID: 248160...

7.8CVSS0.00217EPSS
Exploits0References2
Prion
Prion
added 2023/11/24 12:15 a.m.24 views

Design/Logic Flaw

IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a local user to perform unauthorized actions due to improper encoding. IBM X-Force ID: 248160...

4.3CVSS6.4AI score0.00217EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2023/11/23 11:39 p.m.51 views

CVE-2023-26279

IBM QRadar WinCollect Agent versions 10.0–10.1.7 contain an improper encoding/escaping issue that could allow a local user to perform unauthorized actions. The issue is documented across multiple sources (Red Hat, CNVD/CNNVD mirrors, IBM X-Force). A fix is available: upgrade to WinCollect Standal...

7.8CVSS5.2AI score0.00217EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/11/23 11:39 p.m.15 views

CVE-2023-26279 IBM QRadar WinCollect Agent improper output encoding

IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a local user to perform unauthorized actions due to improper encoding. IBM X-Force ID: 248160...

3.3CVSS7.3AI score0.00217EPSS
Exploits0References2
OSV
OSV
added 2023/11/23 11:15 p.m.3 views

CVE-2021-39008

IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a privileged user to obtain sensitive information due to missing best practices. IBM X-Force ID: 213551...

4.9CVSS5.8AI score0.00595EPSS
Exploits0References2
NVD
NVD
added 2023/11/23 11:15 p.m.19 views

CVE-2021-39008

IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a privileged user to obtain sensitive information due to missing best practices. IBM X-Force ID: 213551...

4.9CVSS0.00595EPSS
Exploits0References2
Prion
Prion
added 2023/11/23 11:15 p.m.15 views

Information disclosure

IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a privileged user to obtain sensitive information due to missing best practices. IBM X-Force ID: 213551...

3.3CVSS5.9AI score0.00595EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/11/23 10:54 p.m.16 views

CVE-2021-39008 IBM QRadar WinCollect Agent information disclosure

IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a privileged user to obtain sensitive information due to missing best practices. IBM X-Force ID: 213551...

2.7CVSS5.5AI score0.00595EPSS
Exploits0References2
CVE
CVE
added 2023/11/23 10:54 p.m.56 views

CVE-2021-39008

IBM QRadar WinCollect Agent (10.0–10.1.7) contains an information-disclosure vulnerability (CVE-2021-39008) due to inadequate protection of sensitive data. Impact: a privileged user could obtain sensitive information. The issue is addressed by upgrading to WinCollect Standalone Agent 10.1.8 (per ...

4.9CVSS4.3AI score0.00595EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2023/11/23 12:0 a.m.2 views

IBM QRadar WinCollect Agent 安全漏洞

IBM QRadar WinCollect Agent is an agent program from International Business Machines IBM for collecting and sending Windows event logs. A code issue vulnerability exists in IBM QRadar WinCollect Agent versions 10.0 through 10.1.7 that stems from improper coding. An attacker could exploit the...

7.8CVSS6.9AI score0.00217EPSS
Exploits0References4
Rows per page
Query Builder