CVE-2017-1721

MediumCVSS 5.6/10Last modified Jun 17, 2026

Description

IBM Security QRadar SIEM 7.2 and 7.3 could allow an unauthenticated user to execute code remotely with lower level privileges under unusual circumstances. IBM X-Force ID: 134810.

Metrics

CVSS 3.0 5.6/10CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-94

Affected software

Vendor	Product	Versions
IBM	Security QRadar SIEM	7.2; 7.3

References

http://www.ibm.com/support/docview.wss?uid=swg22015799Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/134810VDB Entry
http://www.ibm.com/support/docview.wss?uid=swg22015799Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/134810VDB Entry

Timeline

Published: Apr 26, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-172158.8Huawei HG532 with some customized versions has a remote code execution vulnerability. An authenticated attacker could send malicious packets CVE-2017-172165.9Media Gateway Control Protocol (MGCP) in Huawei DP300 V500R002C00; RP200 V500R002C00SPC200; V600R006C00; TE30 V100R001C10; V500R002C00; V600 CVE-2017-172175.9Media Gateway Control Protocol (MGCP) in Huawei DP300 V500R002C00; RP200 V500R002C00SPC200; V600R006C00; TE30 V100R001C10; V500R002C00; V600 CVE-2017-172185.3SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600 CVE-2017-172195.3SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600 CVE-2017-17226.3IBM Security QRadar SIEM 7.2 and 7.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which co CVE-2017-172205.3SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600 CVE-2017-172218.8Import Signal Tone function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerabilit CVE-2017-172228.8Import Language Package function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnera CVE-2017-172238.8Huawei eSpace 7910 V200R003C30; eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 have a directory traversal vulnerability. An a CVE-2017-172248.8Some Huawei smart phones with versions earlier than Harry-AL00C 9.1.0.206(C00E205R3P1) have a null pointer dereference vulnerability. An att CVE-2017-172258.8The Near Field Communication (NFC) module in Huawei Mate 9 Pro mobile phones with the versions before LON-AL00B 8.0.0.340a(C00) has a buffer