Qradar Wincollect (Ibm) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 12 known versions, newest CVE from 2025-04-11. Vendor: Ibm.
CVEs of Qradar Wincollect
- CVE-2024-51461 - CVSS 6.5 (medium), 2025-04-11: IBM QRadar WinCollect Agent 10.0 through 10.1.13 could allow a remote attacker to cause a denial of service by interrupting an HTTP request that could consume…
- CVE-2024-51462 - CVSS 5.3 (medium), 2025-01-17: IBM QRadar WinCollect Agent 10.0.0 through 10.1.12 could allow a remote attacker to inject XML data into parameter values due to improper input validation of…
- CVE-2022-43880 - CVSS 4.4 (medium), 2024-03-03: IBM QRadar WinCollect Agent 10.0 through 10.1.2 could allow a privileged user to cause a denial of service. IBM X-Force ID: 240151.
- CVE-2023-26279 - CVSS 7.8 (high), 2023-11-24: IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a local user to perform unauthorized actions due to improper encoding. IBM X-Force ID: 248160.
- CVE-2021-39008 - CVSS 4.9 (medium), 2023-11-23: IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a privileged user to obtain sensitive information due to missing best practices. IBM X-Force ID:…
- CVE-2023-38736 - CVSS 7.8 (high), 2023-09-08: IBM QRadar WinCollect Agent 10.0 through 10.1.6, when installed to run as ADMIN or SYSTEM, is vulnerable to a local escalation of privilege attack that a…
- CVE-2023-26278 - CVSS 8.2 (high), 2023-05-31: IBM QRadar WinCollect Agent 10.0 through 10.1.3 could allow a local authenticated attacker to gain elevated privileges on the system. IBM X-Force ID: 248158.
- CVE-2023-26277 - CVSS 7.8 (high), 2023-05-31: IBM QRadar WinCollect Agent 10.0 though 10.1.3 could allow a local user to execute commands on the system due to execution with unnecessary privileges. IBM…
- CVE-2021-39006 - CVSS 5.3 (medium), 2022-06-21: IBM QRadar WinCollect Agent 10.0 and 10.0.1 could allow an attacker to obtain sensitive information due to missing best practices. IBM X-Force ID: 213549.
- CVE-2020-4486 - CVSS 8.1 (high), 2020-08-11: IBM QRadar 7.2.0 thorugh 7.2.9 could allow an authenticated user to overwrite or delete arbitrary files due to a flaw after WinCollect installation. IBM…
- CVE-2020-4485 - CVSS 6.5 (medium), 2020-08-11: IBM QRadar 7.2.0 through 7.2.9 could allow an authenticated user to disable the Wincollect service which could aid an attacker in bypassing security…
