CVE-2024-38335 | THREATINT

Description

IBM Security QRadar Network Threat Analytics 1.0.0 through 1.3.1 could allow a privileged user to cause a denial of service due to improper allocation of resources.

PUBLISHED Reserved 2024-06-13 | Published 2025-07-22 | Updated 2025-08-18 | Assigner ibm

MEDIUM: 4.5CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Problem types

CWE-770 Allocation of Resources Without Limits or Throttling

Product status

Default status

unaffected

1.0.0 (semver)

affected

Credits

John Zuccato, Rodney Ryan, Chris Shepherd, Vince Dragnea, Ben Goodspeed, Dawid Bak finder

References

www.ibm.com/support/pages/node/7240244 vendor-advisory patch

cve.org (CVE-2024-38335)

nvd.nist.gov (CVE-2024-38335)

Download JSON