CVE-2024-49822: IBM Qradar Advisor

Medium severity, CVSS 4.1. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM QRadar Advisor 1.0.0 through 2.6.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

Affected products

• IBM Qradar Advisor: from 1.0.0, before 2.6.5 (fixed in 2.6.5)

Published 2025-03-18. Last modified 2026-06-17.