CVE-2019-4672: IBM Qradar Advisor

Medium severity, CVSS 5.3. EPSS: 1.4% chance of exploitation in the next 30 days.

IBM QRadar Advisor 1.1 through 2.5 could allow an unauthorized attacker to obtain sensitive information from specially crafted HTTP requests that could aid in further attacks against the system. IBM X-Force ID: 171438.

Affected products

• IBM Qradar Advisor: from 1.1, before 2.5.1 (fixed in 2.5.1)

Published 2020-02-25. Last modified 2026-06-17.