IBM Qradar Wincollect vulnerabilities

9 CVEs affecting IBM Qradar Wincollect, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-51461, published 2025-04-11.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-39006, published 2022-06-21. Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days. IBM QRadar WinCollect Agent 10.0 and 10.0.1 could allow an attacker to obtain sensitive information due to missing best practices. IBM X-Force ID: 213549.
• CVE-2021-39008, published 2023-11-23. Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days. IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a privileged user to obtain sensitive information due to missing best practices. IBM X-Force ID: 213551.
• CVE-2023-38736, published 2023-09-08. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. IBM QRadar WinCollect Agent 10.0 through 10.1.6, when installed to run as ADMIN or SYSTEM, is vulnerable to a local escalation of privilege attack that a normal user could utilize to gain SYSTEM…
• CVE-2024-51461, published 2025-04-11. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. IBM QRadar WinCollect Agent 10.0 through 10.1.13 could allow a remote attacker to cause a denial of service by interrupting an HTTP request that could consume memory resources.
• CVE-2024-51462, published 2025-01-17. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. IBM QRadar WinCollect Agent 10.0.0 through 10.1.12 could allow a remote attacker to inject XML data into parameter values due to improper input validation of assumed immutable data.
• CVE-2023-26279, published 2023-11-24. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a local user to perform unauthorized actions due to improper encoding. IBM X-Force ID: 248160.
• CVE-2023-26278, published 2023-05-31. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. IBM QRadar WinCollect Agent 10.0 through 10.1.3 could allow a local authenticated attacker to gain elevated privileges on the system. IBM X-Force ID: 248158.
• CVE-2023-26277, published 2023-05-31. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. IBM QRadar WinCollect Agent 10.0 though 10.1.3 could allow a local user to execute commands on the system due to execution with unnecessary privileges. IBM X-Force ID: 248156.
• CVE-2022-43880, published 2024-03-03. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. IBM QRadar WinCollect Agent 10.0 through 10.1.2 could allow a privileged user to cause a denial of service. IBM X-Force ID: 240151.