Vulnerability Details : CVE-2019-4556
IBM QRadar Advisor 1.0.0 through 2.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 166205.
Products affected by CVE-2019-4556
- IBM » Qradar Advisor With WatsonVersions from including (>=) 1.0.0 and up to, including, (<=) 2.4.0cpe:2.3:a:ibm:qradar_advisor_with_watson:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2019-4556
0.17%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 36 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2019-4556
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.0
|
MEDIUM | AV:N/AC:L/Au:S/C:N/I:P/A:N |
8.0
|
2.9
|
NIST | |
|
4.3
|
MEDIUM | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N |
2.8
|
1.4
|
IBM Corporation | |
|
6.5
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
2.8
|
3.6
|
NIST |
References for CVE-2019-4556
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/166205
IBM QRadar Advisor input validation CVE-2019-4556 Vulnerability ReportVDB Entry;Vendor Advisory
-
https://www.ibm.com/support/pages/node/1102443
Security Bulletin: IBM QRadar Advisor With Watson is vulnerable to Hazardous Input Validation in some casesPatch;Vendor Advisory
Jump to