{"id":"CVE-2023-47727","aliases":["EUVD-2023-51825","GHSA-9fx4-733j-xgmg"],"status":"published","title":"IBM QRadar Suite Software file manipulation","description":"IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.20.0 could allow an authenticated user to modify dashboard parameters due to improper input validation.  IBM X-Force ID:  272089.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00348,"percentile":0.28575,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1287"],"published":"2024-05-02T14:43:57Z","modified":"2026-06-17T06:33:11Z","products":[{"vendor":"ibm","product":"cloud pak for security"},{"vendor":"ibm","product":"cloud_pak_for_security"},{"vendor":"ibm","product":"qradar suite software"},{"vendor":"ibm","product":"qradar_suite"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7149968","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/272089","tags":["vdb-entry","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-47727"},{"url":"https://github.com/advisories/GHSA-9fx4-733j-xgmg"}],"sources":{"cve":[{"id":"CVE-2023-47727","title":"IBM QRadar Suite Software file manipulation","description":"IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.20.0 could allow an authenticated user to modify dashboard parameters due to improper input validation.  IBM X-Force ID:  272089.","status":"published","published":"2024-05-02T14:43:57.748Z","modified":"2024-08-02T21:16:43.556Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-1287"],"updated_at":"2026-11-02T14:35:13.912858Z"}],"euvd":[{"id":"EUVD-2023-51825","description":"IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.20.0 could allow an authenticated user to modify dashboard parameters due to improper input validation.  IBM X-Force ID:  272089.","status":"published","published":"2024-05-02T14:43:57Z","modified":"2024-08-02T21:16:43Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T03:49:57.383318Z"}],"ghsa":[{"id":"GHSA-9fx4-733j-xgmg","title":"IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0...","description":"IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.20.0 could allow an authenticated user to modify dashboard parameters due to improper input validation.  IBM X-Force ID:  272089.","status":"published","published":"2024-05-02T15:30:35Z","modified":"2024-05-02T15:30:44Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-1287"],"updated_at":"2026-11-02T14:57:16.118135Z"}],"nvd":[{"id":"CVE-2023-47727","description":"IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.20.0 could allow an authenticated user to modify dashboard parameters due to improper input validation.  IBM X-Force ID:  272089.","status":"published","published":"2024-05-02T15:15:06.68Z","modified":"2026-06-17T06:33:11.793Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-1287"],"updated_at":"2026-11-02T14:09:11.362739Z"}]}}