{"id":"CVE-2024-38335","aliases":["EUVD-2024-54807","GHSA-r7x8-2ffq-4993"],"status":"published","title":"IBM Security QRadar Network Threat Analytics denial of service","description":"IBM Security QRadar Network Threat Analytics 1.0.0 through 1.3.1 could allow a privileged user to cause a denial of service due to improper allocation of resources.","severity":{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00212,"percentile":0.1152,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-770"],"published":"2025-07-22T17:13:15Z","modified":"2026-06-17T07:39:57Z","products":[{"vendor":"ibm","product":"qradar_network_threat_analytics"},{"vendor":"ibm","product":"security qradar network threat analytics"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7240244","tags":["vendor-advisory","patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-38335"},{"url":"https://github.com/advisories/GHSA-r7x8-2ffq-4993"}],"sources":{"cve":[{"id":"CVE-2024-38335","title":"IBM Security QRadar Network Threat Analytics denial of service","description":"IBM Security QRadar Network Threat Analytics 1.0.0 through 1.3.1 could allow a privileged user to cause a denial of service due to improper allocation of resources.","status":"published","published":"2025-07-22T17:13:15.25Z","modified":"2025-08-18T01:32:02.108Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:34:16.007021Z"}],"euvd":[{"id":"EUVD-2024-54807","description":"IBM Security QRadar Network Threat Analytics 1.0.0 through 1.3.1 could allow a privileged user to cause a denial of service due to improper allocation of resources.","status":"published","published":"2025-07-22T17:13:15Z","modified":"2025-08-18T01:32:02Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T20:31:56.298799Z"}],"ghsa":[{"id":"GHSA-r7x8-2ffq-4993","title":"IBM Security QRadar Network Threat Analytics 1.0.0 through 1.3.1 could allow a privileged user to...","description":"IBM Security QRadar Network Threat Analytics 1.0.0 through 1.3.1 could allow a privileged user to cause a denial of service due to improper allocation of resources.","status":"published","published":"2025-07-22T18:30:42Z","modified":"2025-07-22T18:30:53Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:03:05.693325Z"}],"nvd":[{"id":"CVE-2024-38335","description":"IBM Security QRadar Network Threat Analytics 1.0.0 through 1.3.1 could allow a privileged user to cause a denial of service due to improper allocation of resources.","status":"published","published":"2025-07-22T18:15:35.18Z","modified":"2026-06-17T07:39:57.497Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:10:47.073504Z"}]}}
