CVE-2017-1721: ibm qradar_security_information_and_event_manager Code Injection
CVSS: 6.8v2.0MediumModified
Published 26-04-2018Last modified 16-09-2024
Vulnerability summary
CVE-2017-1721 is a medium (CVSS 6.8) Code Injection vulnerability in ibm qradar_security_information_and_event_manager. EPSS estimates a 1.38% chance of exploitation in the next 30 days, higher than 71.6% of scored vulnerabilities.
CVSS score
6.8/10
010
Medium · v2.0 (NVD)EPSS score
1.38%
0%100%
Low · -0.03 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 26-04-2018PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
IBM Security QRadar SIEM 7.2 and 7.3 could allow an unauthenticated user to execute code remotely with lower level privileges under unusual circumstances. IBM X-Force ID: 134810.
CVSS metrics
2 scores · 1 source · 2 versionsMedium 5.6Preferred score · NVD (NIST)
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:LSourcesSingle source
Medium 6.8Preferred score · NVD (NIST)
AV:N/AC:M/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
1.38%
Chance of exploitation in the next 30 days
Percentile
72%
Versus all other CVEs
30-day change
-0.03 pp
From 1.40% on 19-09-2026
19-09-202619-10-2026
EPSS score1.38%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ibm2 products
- qradar_security_information_and_event_manager≥ 7.2.0, < 7.2.8 | 7.2.8 | 7.2.8:p1 | 7.2.8:p10 | 7.2.8:p11 | 7.2.8:p2 | 7.2.8:p3 | 7.2.8:p4 | 7.2.8:p5 | 7.2.8:p6 | 7.2.8:p7 | 7.2.8:p8 | 7.2.8:p9 | 7.3.0 | 7.3.0:p1 | 7.3.0:p2 | 7.3.0:p3 | 7.3.0:p4 | 7.3.0:p5 | 7.3.0:p6 | 7.3.0:p7
- security qradar siem7.2 | 7.3
1 vendor · 2 products