CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-26279 – IBM QRadar WinCollect Agent improper output encoding
https://notcve.org/view.php?id=CVE-2023-26279
IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a local user to perform unauthorized actions due to improper encoding. IBM X-Force ID: 248160. IBM QRadar WinCollect Agent 10.0 a 10.1.7 podría permitir que un usuario local realice acciones no autorizadas debido a una codificación incorrecta. ID de IBM X-Force: 248160. • https://exchange.xforce.ibmcloud.com/vulnerabilities/213551 https://www.ibm.com/support/pages/node/7081403 • CWE-116: Improper Encoding or Escaping of Output •
CVSS: 4.9EPSS: 0%CPEs: 1EXPL: 0CVE-2021-39008 – IBM QRadar WinCollect Agent information disclosure
https://notcve.org/view.php?id=CVE-2021-39008
IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a privileged user to obtain sensitive information due to missing best practices. IBM X-Force ID: 213551. IBM QRadar WinCollect Agent 10.0 a 10.1.7 podría permitir que un usuario privilegiado obtenga información confidencial debido a la falta de mejores prácticas. ID de IBM X-Force: 213551. • https://exchange.xforce.ibmcloud.com/vulnerabilities/213551 https://www.ibm.com/support/pages/node/7081403 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-38736 – IBM QRadar WinCollect Agent privilege escalation
https://notcve.org/view.php?id=CVE-2023-38736
IBM QRadar WinCollect Agent 10.0 through 10.1.6, when installed to run as ADMIN or SYSTEM, is vulnerable to a local escalation of privilege attack that a normal user could utilize to gain SYSTEM permissions. IBM X-Force ID: 262542. IBM QRadar WinCollect Agent 10.0 a 10.1.6, cuando se instala para ejecutarse como ADMIN o SYSTEM, es vulnerable a una escalada local de ataque de privilegios que un usuario normal podría utilizar para obtener permisos de SYSTEM. ID de IBM X-Force: 262542. • https://exchange.xforce.ibmcloud.com/vulnerabilities/262542 https://www.ibm.com/support/pages/node/7030703 •
CVSS: 8.2EPSS: 0%CPEs: 1EXPL: 0CVE-2023-26278 – IBM QRadar WinCollect Agent privilege escalation
https://notcve.org/view.php?id=CVE-2023-26278
IBM QRadar WinCollect Agent 10.0 through 10.1.3 could allow a local authenticated attacker to gain elevated privileges on the system. IBM X-Force ID: 248158. • https://exchange.xforce.ibmcloud.com/vulnerabilities/248158 https://www.ibm.com/support/pages/node/6999341 •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-26277 – IBM QRadar WinCollect Agent privilege escalation
https://notcve.org/view.php?id=CVE-2023-26277
IBM QRadar WinCollect Agent 10.0 though 10.1.3 could allow a local user to execute commands on the system due to execution with unnecessary privileges. IBM X-Force ID: 248156. • https://https://exchange.xforce.ibmcloud.com/vulnerabilities/248156 https://www.ibm.com/support/pages/node/6999343 •