IBM Qradar Advisor With Watson vulnerabilities

3 CVEs affecting IBM Qradar Advisor With Watson, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-20380, published 2021-06-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-1732, published 2018-12-05. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. IBM QRadar Advisor with Watson 1.14.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 147810.
CVE-2021-20380, published 2021-06-03. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. IBM QRadar Advisor With Watson App 1.1 through 2.5 as used on IBM QRadar SIEM 7.4 could allow a remote user to obtain sensitive information from HTTP requests that could aid in further attacks…
CVE-2019-4556, published 2019-11-09. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. IBM QRadar Advisor 1.0.0 through 2.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data…