High severity · published Oct 5, 2018
CVE-2018-1647
IBM QRadar Incident Forensics 7.2 and 7.3 does not properly restrict the size or amount of resources requested which could allow an unauthenticated user to cause a denial of…
7.5
CVSS
1.4%
EPSS
No
On KEV
Description
IBM QRadar Incident Forensics 7.2 and 7.3 does not properly restrict the size or amount of resources requested which could allow an unauthenticated user to cause a denial of service. IBM X-Force ID: 144650.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QI
Qradar Incident Forensics · Ibm
7.2.8; 7.2.8; 7.2.8; 7.3.1; 7.3.1; 7.2.0 through 7.2.8; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-1647
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-1647
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/144650
Patch
https://www.ibm.com/support/docview.wss?uid=ibm10729705
More from Qradar Incident Forensics
8.8
CVE-2016-9726
IBM QRadar Incident Forensics 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system
8.5
CVE-2016-9727
IBM QRadar 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system
7.8
CVE-2025-33120
IBM QRadar SIEM 7.5 through 7.5.0 UP13 could allow an authenticated user to escalate their privileges via a misconfigured cronjob due to execution with unnecessary privileges
7.5
CVE-2018-1648
IBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information
7.4
CVE-2017-1622
IBM QRadar SIEM 7.2.8 and 7.3 does not validate, or incorrectly validates, a certificate