CVE-2024-51462: IBM Qradar Wincollect

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

IBM QRadar WinCollect Agent 10.0.0 through 10.1.12 could allow a remote attacker to inject XML data into parameter values due to improper input validation of assumed immutable data.

Affected products

• IBM Qradar Wincollect: from 10.0, up to and including 10.1.12

Published 2025-01-17. Last modified 2026-06-17.