{"id":"CVE-2023-47726","state":"PUBLISHED","title":"IBM QRadar Suite improper input validation","description":"IBM QRadar Suite Software 1.10.12.0 through 1.10.21.0 and IBM Cloud Pak for Security 1.10.12.0 through 1.10.21.0 could allow an authenticated user to execute certain arbitrary commands due to improper input validation.  IBM X-Force ID:  272087.","publishedAt":"2024-06-18T13:40:39.683Z","updatedAt":"2024-08-02T21:16:43.641Z","severity":{"score":7.1,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","source":"ibm"},"assigner":"ibm","products":["IBM QRadar Suite Software","IBM Cloud Pak for Security"],"affected":[{"vendor":"IBM","product":"QRadar Suite Software","defaultStatus":"unaffected","versions":[{"version":"1.10.12.0","status":"affected","lessThanOrEqual":"1.10.21.0","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:qradar_suite:1.10.12.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:qradar_suite:1.10.21.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:cloud_pak_for_security:1.10.12.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:cloud_pak_for_security:1.10.21.0:*:*:*:*:*:*:*"]},{"vendor":"IBM","product":"Cloud Pak for Security","defaultStatus":"unaffected","versions":[{"version":"1.10.12.0","status":"affected","lessThanOrEqual":"1.10.21.0","versionType":"semver"}]}],"references":["https://https://www.ibm.com/support/pages/node/7157750","https://exchange.xforce.ibmcloud.com/vulnerabilities/272087"],"weaknesses":["CWE-1287"],"ingestedAt":"2026-10-29T20:06:24.729Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/47xxx/CVE-2023-47726.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-47726","state":"PUBLISHED","datePublished":"2024-06-18T13:40:39.683Z","dateUpdated":"2024-08-02T21:16:43.641Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2023-11-09T11:31:22.401Z"},"containers":{"cna":{"title":"IBM QRadar Suite improper input validation","descriptions":[{"lang":"en","value":"IBM QRadar Suite Software 1.10.12.0 through 1.10.21.0 and IBM Cloud Pak for Security 1.10.12.0 through 1.10.21.0 could allow an authenticated user to execute certain arbitrary commands due to improper input validation.  IBM X-Force ID:  272087."}],"affected":[{"vendor":"IBM","product":"QRadar Suite Software","defaultStatus":"unaffected","versions":[{"version":"1.10.12.0","status":"affected","lessThanOrEqual":"1.10.21.0","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:qradar_suite:1.10.12.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:qradar_suite:1.10.21.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:cloud_pak_for_security:1.10.12.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:cloud_pak_for_security:1.10.21.0:*:*:*:*:*:*:*"]},{"vendor":"IBM","product":"Cloud Pak for Security","defaultStatus":"unaffected","versions":[{"version":"1.10.12.0","status":"affected","lessThanOrEqual":"1.10.21.0","versionType":"semver"}]}],"references":[{"url":"https://https://www.ibm.com/support/pages/node/7157750","tags":["vendor-advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/272087","tags":["vdb-entry"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1287","description":"CWE-1287 Improper Validation of Specified Type of Input","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2024-06-18T13:40:39.683Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-06-26T20:31:06.948638Z","id":"CVE-2023-47726","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-26T20:31:26.980Z"}},{"title":"CVE Program Container","references":[{"url":"https://https://www.ibm.com/support/pages/node/7157750","tags":["vendor-advisory","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/272087","tags":["vdb-entry","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T21:16:43.641Z"}}]}}}