{"id":"CVE-2023-47726","aliases":["EUVD-2023-51824","GHSA-9f2j-v7x5-9jcf"],"status":"published","title":"IBM QRadar Suite improper input validation","description":"IBM QRadar Suite Software 1.10.12.0 through 1.10.21.0 and IBM Cloud Pak for Security 1.10.12.0 through 1.10.21.0 could allow an authenticated user to execute certain arbitrary commands due to improper input validation.  IBM X-Force ID:  272087.","severity":{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00368,"percentile":0.30905,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1287"],"published":"2024-06-18T13:40:39Z","modified":"2026-06-17T06:33:11Z","products":[{"vendor":"ibm","product":"cloud pak for security"},{"vendor":"ibm","product":"cloud_pak_for_security"},{"vendor":"ibm","product":"qradar suite software"},{"vendor":"ibm","product":"qradar_suite"}],"references":[{"url":"https://https://www.ibm.com/support/pages/node/7157750","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/272087","tags":["vdb-entry","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-47726"},{"url":"https://github.com/advisories/GHSA-9f2j-v7x5-9jcf"}],"sources":{"cve":[{"id":"CVE-2023-47726","title":"IBM QRadar Suite improper input validation","description":"IBM QRadar Suite Software 1.10.12.0 through 1.10.21.0 and IBM Cloud Pak for Security 1.10.12.0 through 1.10.21.0 could allow an authenticated user to execute certain arbitrary commands due to improper input validation.  IBM X-Force ID:  272087.","status":"published","published":"2024-06-18T13:40:39.683Z","modified":"2024-08-02T21:16:43.641Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-1287"],"updated_at":"2026-11-02T14:35:14.298866Z"}],"euvd":[{"id":"EUVD-2023-51824","description":"IBM QRadar Suite Software 1.10.12.0 through 1.10.21.0 and IBM Cloud Pak for Security 1.10.12.0 through 1.10.21.0 could allow an authenticated user to execute certain arbitrary commands due to improper input validation.  IBM X-Force ID:  272087.","status":"published","published":"2024-06-18T13:40:39Z","modified":"2024-08-02T21:16:43Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","level":"high"}],"updated_at":"2026-11-03T03:49:57.383318Z"}],"ghsa":[{"id":"GHSA-9f2j-v7x5-9jcf","title":"IBM QRadar Suite Software 1.10.12.0 through 1.10.21.0 and IBM Cloud Pak for Security 1.10.12.0...","description":"IBM QRadar Suite Software 1.10.12.0 through 1.10.21.0 and IBM Cloud Pak for Security 1.10.12.0 through 1.10.21.0 could allow an authenticated user to execute certain arbitrary commands due to improper input validation.  IBM X-Force ID:  272087.","status":"published","published":"2024-06-18T15:30:35Z","modified":"2024-06-18T15:30:39Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","level":"high"}],"cwes":["CWE-1287"],"updated_at":"2026-11-02T14:57:30.366429Z"}],"nvd":[{"id":"CVE-2023-47726","description":"IBM QRadar Suite Software 1.10.12.0 through 1.10.21.0 and IBM Cloud Pak for Security 1.10.12.0 through 1.10.21.0 could allow an authenticated user to execute certain arbitrary commands due to improper input validation.  IBM X-Force ID:  272087.","status":"published","published":"2024-06-18T14:15:10.317Z","modified":"2026-06-17T06:33:11.647Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-1287"],"updated_at":"2026-11-02T14:09:17.205287Z"}]}}