Lucene search
+L

1002 matches found

NVD
NVD
•added 2025/03/18 3:15 p.m.•24 views

CVE-2024-49822

IBM QRadar Advisor 1.0.0 through 2.6.5 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

4.1CVSS0.00289EPSS
SaveExploits0References1
OSV
OSV
•added 2025/03/18 3:15 p.m.•16 views

CVE-2024-49822

IBM QRadar Advisor 1.0.0 through 2.6.5 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

4.1CVSS5.8AI score0.00289EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/18 2:19 p.m.•33 views

CVE-2024-49822 IBM QRadar Advisor server-side request forgery

IBM QRadar Advisor 1.0.0 through 2.6.5 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

4.1CVSS6.8AI score0.00289EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/18 2:19 p.m.•31 views

CVE-2024-49822 IBM QRadar Advisor server-side request forgery

IBM QRadar Advisor 1.0.0 through 2.6.5 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

4.1CVSS0.00289EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/18 12:00 a.m.•22 views

IBM QRadar Advisor 代码问题漏洞

IBM QRadar Advisor is a suite of security threat analysis solutions from International Business Machines IBM. The product includes features such as security threat response and threat probing. A code issue vulnerability exists in IBM QRadar Advisor versions 1.0.0 through 2.6.5, which stems from...

4.1CVSS6.4AI score0.00289EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/18 12:00 a.m.•3 views

CVE-2024-49822: Server-Side Request Forgery (SSRF)

IBM QRadar Advisor 1.0.0 through 2.6.5 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

4.1CVSS5.5AI score0.00289EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/03/17 1:48 p.m.•28 views

Security Bulletin: QRadar Advisor With Watson for IBM QRadar SIEM is vulnerable to server-side request forgery (CVE-2024-49822)

Summary QRadar Advisor With Watson for IBM QRadar SIEM is vulnerable to to server-side request forgery which may allow an authenticated attacker to send unauthorized requests. This vulnerability has been addressed in the update. Vulnerability Details CVEID:CVE-2024-49822 DESCRIPTION: IBM QRadar...

4.1CVSS6.5AI score0.00289EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/03/17 1:46 p.m.•37 views

Security Bulletin: QRadar Advisor With Watson for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. QRadar Advisor With Watson for IBM QRadar SIEM has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2024-6345 DESCRIPTION: pypa/setuptools could...

8.8CVSS9.3AI score0.02996EPSS
SaveExploits5Affected Software1
Positive Technologies
Positive Technologies
•added 2025/03/17 12:00 a.m.•18 views

PT-2025-11603 · Ibm · Ibm Qradar Advisor

Name of the Vulnerable Software and Affected Versions: IBM QRadar Advisor versions 1.0.0 through 2.6.5 Description: The issue allows an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. This is due to a...

4.1CVSS6.6AI score0.00289EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2025/03/16 12:00 a.m.•12 views

The vulnerability of the design and analysis tools for developing efficient Intel Advisor code, as well as the Intel oneAPI Base Toolkit, related to insufficient access control mechanisms, allows attackers to exploit these vulnerabilities to enhance their privileges.

The vulnerability of the design and analysis tools for developing efficient Intel Advisor code, as well as the Intel oneAPI Base Toolkit, is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...

6.7CVSS5.5AI score0.00122EPSS
SaveExploits0References3Affected Software2
IBM Security Bulletins
IBM Security Bulletins
•added 2025/03/13 3:39 a.m.•54 views

Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities found in Java, Node.js and IBM WebSphere Application Server Liberty

Summary There are multiple vulnerabilities in Java, Node.js and IBM WebSphere Application Server Liberty used by IBM Cloud Transformation Advisor. Vulnerability Details CVEID:CVE-2024-43799 DESCRIPTION: pillarjs send is vulnerable to cross-site scripting, caused by improper validation of...

8.3CVSS7.6AI score0.27392EPSS
SaveExploits6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/03/05 12:00 a.m.•15 views

The vulnerability of the design and analysis tools for developing efficient Intel Advisor code, as well as the Intel oneAPI Base Toolkit, related to an uncontrolled element in the search process, allows attackers to enhance their privileges.

The vulnerability of the design and analysis tools for developing efficient Intel Advisor code, as well as the set of development tools Intel oneAPI Base Toolkit, is related to an uncontrollable element in the search process. Exploiting this vulnerability could allow attackers to enhance their...

6.7CVSS5.5AI score0.00199EPSS
SaveExploits0References2Affected Software2
OSV
OSV
•added 2025/02/12 10:15 p.m.•15 views

CVE-2024-39284

Uncontrolled search path for some IntelR Advisor software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

5.4CVSS5.8AI score0.00199EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/12 10:15 p.m.•42 views

CVE-2024-39284

Uncontrolled search path for some IntelR Advisor software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS0.00199EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/12 9:19 p.m.•10 views

CVE-2024-39284

Uncontrolled search path for some IntelR Advisor software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS6.8AI score0.00199EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/12 9:19 p.m.•72 views

CVE-2024-39284

CVE-2024-39284 concerns an uncontrolled search path in Intel® Advisor software before version 2024.2, potentially allowing an authenticated user to escalate privileges via local access. Connected sources (Intel advisory INTEL-SA-01208, Red Hat RH:CVE-2024-39284, and related feeds) confirm the aff...

6.7CVSS7.2AI score0.00199EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2025/02/12 9:19 p.m.•23 views

CVE-2024-39284

Uncontrolled search path for some IntelR Advisor software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS0.00199EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/12 12:00 a.m.•37 views

Intel Advisor 代码问题漏洞

Intel Advisor is a design and analysis tool for developing high-performance code from Intel Corporation USA. A code issue vulnerability exists in Intel Advisor versions prior to 2024.2 that stems from the presence of an uncontrolled search path that could allow an authenticated user to potentiall...

6.7CVSS6.6AI score0.00199EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/12 12:00 a.m.•2 views

CVE-2024-39284: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR Advisor software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS5.8AI score0.00199EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/11 12:00 a.m.•15 views

PT-2025-6660

Name of the Vulnerable Software and Affected Versions: IntelR Advisor versions prior to 2024.2 Description: The issue concerns an uncontrolled search path in some IntelR Advisor software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS6.7AI score0.00199EPSS
SaveExploits0References5
Rows per page
Query Builder