CVE-2024-51461: IBM QRadar WinCollect Agent denial of service

Published Apr 10, 2025
·
Updated

IBM QRadar WinCollect Agent 10.0 through 10.1.13 could allow a remote attacker to cause a denial of service by interrupting an HTTP request that could consume memory resources.

Other sources

IBM QRadar WinCollect Agent could allow a remote attacker to cause a denial of service by interrupting an HTTP request that could consume memory resources.

IBM

Affected Software

3 affected components
IBM QRadar WinCollect Agent>=10.0<=10.1.13
IBM QRadar WinCollect Agent<=10.0 - 10.1.13
IBM QRadar Wincollect>=10.0<10.1.14

Event History

Apr 10, 2025
CVE Published
via IBM·12:00 AM
Apr 11, 2025
CVE Published
via MITRE·01:13 AM
Data Sourced
via MITRE·01:13 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 AM
DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

1

What is the severity of CVE-2024-51461?

CVE-2024-51461 has a medium severity rating due to its potential to cause denial of service.

2

How do I fix CVE-2024-51461?

To mitigate CVE-2024-51461, upgrade IBM QRadar WinCollect Agent to the latest version beyond 10.1.13.

3

What impact does CVE-2024-51461 have on IBM QRadar WinCollect Agent?

CVE-2024-51461 may allow an attacker to interrupt HTTP requests, leading to excessive memory consumption and service disruption.

4

Who is affected by CVE-2024-51461?

CVE-2024-51461 affects users running IBM QRadar WinCollect Agent versions from 10.0 to 10.1.13.

5

Is CVE-2024-51461 easy to exploit?

CVE-2024-51461 can potentially be exploited by remote attackers and may require minimal effort to trigger the denial of service.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203