PT-2024-10318 · Ibm · Ibm Qradar Wincollect Agent

Published 2024-10-28 · Updated 2025-08-14 · CVE-2024-51462

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM QRadar WinCollect Agent versions 10.0.0 through 10.1.12

Description The issue is related to the improper input validation of assumed immutable data, which could allow a remote attacker to inject XML data into parameter values. This could potentially lead to data modification.

Recommendations For versions 10.0.0 through 10.1.12, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the affected parameters to minimize the risk of exploitation. Avoid using the affected IBM QRadar WinCollect Agent until the issue is resolved.

Fix

Weakness Enumeration

CWE-471

Related Identifiers

BDU:2025-00770

CVE-2024-51462

Affected Products

Ibm Qradar Wincollect Agent

References · 9

• https://ibm.com/support/pages/node/7176043 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-00770 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-51462 · Security Note
• https://osv.dev/vulnerability/CVE-2024-51462 · Vendor Advisory
• https://t.me/cvedetector/15677 · Telegram Post
• https://t.me/cvenotify/107720 · Telegram Post
• https://vuldb.com/?id.292349 · Note
• https://twitter.com/CVEnew/status/1880248078147662088 · Twitter Post
• https://t.me/cveNotify/132171 · Telegram Post