How severe is CVE-2024-51462?

CVE-2024-51462 has a CVSS 3.x base score of 4.0, rated medium severity. It is exploitable over local access with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity low, and availability none.

Is CVE-2024-51462 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (28th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2024-51462?

CVE-2024-51462 affects Ibm Qradar Wincollect. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2024-51462?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2024-51462 have an EU (EUVD) identifier?

Yes. CVE-2024-51462 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-45796.

When was CVE-2024-51462 published?

CVE-2024-51462 was published on 2025-01-17 and last updated on 2026-06-17.

CVE-2024-51462

CVE-2024-51462 is a medium-severity vulnerability in Ibm Qradar Wincollect with a CVSS 3.x base score of 4.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-471.

Key facts

Severity: Medium (CVSS 3.x base score 4.0)
EPSS exploit prediction: 0% (28th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2024-45796
Weakness: CWE-471
Affected product: Ibm Qradar Wincollect
Published: 2025-01-17
Last modified: 2026-06-17

Description

IBM QRadar WinCollect Agent 10.0.0 through 10.1.12 could allow a remote attacker to inject XML data into parameter values due to improper input validation of assumed immutable data.

Frequently asked questions

What is CVE-2024-51462?: IBM QRadar WinCollect Agent 10.0.0 through 10.1.12 could allow a remote attacker to inject XML data into parameter values due to improper input validation of assumed immutable data.
How severe is CVE-2024-51462?: CVE-2024-51462 has a CVSS 3.x base score of 4.0, rated medium severity. It is exploitable over local access with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity low, and availability none.
Is CVE-2024-51462 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (28th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2024-51462?: CVE-2024-51462 affects Ibm Qradar Wincollect. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2024-51462?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2024-51462 have an EU (EUVD) identifier?: Yes. CVE-2024-51462 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-45796.
When was CVE-2024-51462 published?: CVE-2024-51462 was published on 2025-01-17 and last updated on 2026-06-17.

References

https://www.ibm.com/support/pages/node/7176043

Affected products (1)

cpe:2.3:a:ibm:qradar_wincollect:*:*:*:*:*:*:*:*

More vulnerabilities in Ibm Qradar Wincollect

CVE-2023-26278 — High (CVSS 8.2): IBM QRadar WinCollect Agent 10.0 through 10.1.3 could allow a local authenticated attacker to gain elevated privileges…
CVE-2023-26277 — High (CVSS 7.8): IBM QRadar WinCollect Agent 10.0 though 10.1.3 could allow a local user to execute commands on the system due to…
CVE-2023-38736 — High (CVSS 7.5): IBM QRadar WinCollect Agent 10.0 through 10.1.6, when installed to run as ADMIN or SYSTEM, is vulnerable to a local…
CVE-2021-39006 — Medium (CVSS 5.3): IBM QRadar WinCollect Agent 10.0 and 10.0.1 could allow an attacker to obtain sensitive information due to missing best…
CVE-2022-43880 — Medium (CVSS 4.4): IBM QRadar WinCollect Agent 10.0 through 10.1.2 could allow a privileged user to cause a denial of service. IBM…
CVE-2024-51461 — Medium (CVSS 4.3): IBM QRadar WinCollect Agent 10.0 through 10.1.13 could allow a remote attacker to cause a denial of service by…

All CVEs affecting Ibm Qradar Wincollect →

Other CWE-471 vulnerabilities

CVE-2022-25893 — Critical (CVSS 9.8): The package vm2 before 3.9.10 are vulnerable to Arbitrary Code Execution due to the usage of prototype lookup for the…
CVE-2018-3722 — High (CVSS 8.8): merge-deep node module before 3.0.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which…
CVE-2018-3720 — High (CVSS 8.8): assign-deep node module before 0.4.7 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which…
CVE-2018-3728 — High (CVSS 8.8): hoek node module before 4.2.0 and 5.0.x before 5.0.3 suffers from a Modification of Assumed-Immutable Data (MAID)…
CVE-2024-55551 — High (CVSS 8.3): An issue was discovered in Exasol JDBC driver before 24.2.1 (2024-12-10). Attackers can inject malicious parameters…
CVE-2024-9876 — High (CVSS 7.3): : Modification of Assumed-Immutable Data (MAID) vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue affects…

Browse all CWE-471 vulnerabilities →