CVE-2019-4210: ibm qradar_security_information_and_event_manager
Vulnerability summary
CVE-2019-4210 is a critical (CVSS 9.4) vulnerability in ibm qradar_security_information_and_event_manager. EPSS estimates a 2.25% chance of exploitation in the next 30 days, higher than 82.7% of scored vulnerabilities.
Timeline
- 08-04-2019PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
IBM QRadar SIEM 7.3.2 could allow a user to bypass authentication exposing certain functionality which could lead to information disclosure or modification of application configuration. IBM X-Force ID: 158986.
CVSS metrics
4 scores · 2 sources · 3 versions- NVDNIST9.4CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
EPSS trend
Probability
2.25%
Chance of exploitation in the next 30 days
Percentile
83%
Versus all other CVEs
30-day change
No change 0.00 pp
From 2.25% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ibm2 products
- qradar_security_information_and_event_manager7.3.2 | 7.3.2:if01
- qradar siem7.3.2
1 vendor · 2 products