CVE-2017-1721

CWE-94 — Code Injection3 documents3 sources
Severity
5.6MEDIUM
EPSS
0.6%
top 31.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Qradar Security Information AND Event ManagerIBM Security Qradar Siem
Timeline
PublishedApr 26
Latest updateMay 14

Description

IBM Security QRadar SIEM 7.2 and 7.3 could allow an unauthenticated user to execute code remotely with lower level privileges under unusual circumstances. IBM X-Force ID: 134810.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:LExploitability: 2.2 | Impact: 3.4

Affected Packages2 packages

▶CVEListV5ibm/security_qradar_siem7.2, 7.3+1

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-f7rq-858v-8r8m: IBM Security QRadar SIEM 7↗2022-05-14
▶
CVEList
CVE-2017-1721: IBM Security QRadar SIEM 7↗2018-04-26
▶
CVE-2017-1721 (MEDIUM CVSS 5.6) | IBM Security QRadar SIEM 7.2 and 7. | cvebase.io