IBM Qradar Wincollect vulnerabilities
11 vulnerabilities
Known vulnerabilities in IBM Qradar Wincollect, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2021-39006ibm · qradar_wincollect +1 moreibm qradar_wincollectIBM QRadar WinCollect Agent 10.0 and 10.0.1 could allow an attacker to obtain sensitive information due to missing best practices. IBM X-Force ID: 213549.EPSS0.90%MediumCVE-2021-39008ibm · qradar_wincollect +1 moreIBM QRadar WinCollect Agent information disclosureIBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a privileged user to obtain sensitive information due to missing best practices. IBM X-Force ID: 213551.EPSS0.60%MediumCVE-2020-4485ibm · qradar_security_information_and_event_manager +1 moreibm qradar_security_information_and_event_managerIBM QRadar 7.2.0 through 7.2.9 could allow an authenticated user to disable the Wincollect service which could aid an attacker in bypassing security mechanisms in future attacks. IBM X-Force ID: 181860.EPSS1.49%HighCVE-2020-4486ibm · qradar_security_information_and_event_manager +1 moreibm qradar_security_information_and_event_managerIBM QRadar 7.2.0 thorugh 7.2.9 could allow an authenticated user to overwrite or delete arbitrary files due to a flaw after WinCollect installation. IBM X-Force ID: 181861.EPSS1.51%MediumCVE-2022-43880ibm · qradar_wincollect +1 moreIBM QRadar WinCollect AgentIBM X-Force ID: 240151.EPSS0.17%MediumCVE-2024-51461ibm · qradar_wincollect +1 moreIBM QRadar WinCollect Agent denial of serviceIBM QRadar WinCollect Agent 10.0 through 10.1.13 could allow a remote attacker to cause a denial of service by interrupting an HTTP request that could consume memory resources.EPSS0.41%MediumCVE-2024-51462ibm · qradar_wincollect +1 moreIBM QRadar WinCollect Agent data manipulationIBM QRadar WinCollect Agent 10.0.0 through 10.1.12 could allow a remote attacker to inject XML data into parameter values due to improper input validation of assumed immutable data.EPSS0.37%HighCVE-2023-26278ibm · qradar_wincollect +1 moreIBM QRadar WinCollect Agent privilege escalationIBM QRadar WinCollect Agent 10.0 through 10.1.3 could allow a local authenticated attacker to gain elevated privileges on the system. IBM X-Force ID: 248158.EPSS0.20%HighCVE-2023-26279ibm · qradar_wincollect +1 moreIBM QRadar WinCollect Agent improper output encodingIBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a local user to perform unauthorized actions due to improper encoding. IBM X-Force ID: 248160.EPSS0.22%HighCVE-2023-26277ibm · qradar_wincollect +1 moreIBM QRadar WinCollect Agent privilege escalationIBM QRadar WinCollect Agent 10.0 though 10.1.3 could allow a local user to execute commands on the system due to execution with unnecessary privileges. IBM X-Force ID: 248156.EPSS0.19%HighCVE-2023-38736ibm · qradar_wincollect +1 moreIBM QRadar WinCollect Agent privilege escalationIBM QRadar WinCollect Agent 10.0 through 10.1.6, when installed to run as ADMIN or SYSTEM, is vulnerable to a local escalation of privilege attack that a normal user could utilize to gain SYSTEM permissions. IBM X-Force ID: 262542.EPSS0.43%