IBM QRadar SIEM’s HTTP Receiver protocol has a flaw that can lead to a denial of service when a remote attacker sends crafted data that forces the component to consume excessive resources, exhaust memory or processing capacity, and render the SIEM unavailable to legitimate users. The weakness is identified as CWE‑400 (Uncontrolled Resource Consumption)."The CVE does not state whether authentication is required; based on the fact that the HTTP Receiver is a network endpoint, it is inferred that the vulnerability could be exploited remotely by sending requests, but this is not explicitly confirmed in the CVE description.

The affected product is IBM QRadar Security Information and Event Management, specifically the HTTP Receiver component. Fixes are available for releases 7.5 and 7.6; the CVE description does not list all minor versions, so any deployment using the HTTP Receiver should be reviewed for risk.

The CVSS score of 8.6 indicates a high severity issue, while the EPSS score of less than 1 % suggests a low current exploitation probability. The vulnerability is not listed in the CISA KEV catalog, implying no known active exploitation campaigns. The attack vector is inferred to be remote network access to the HTTP Receiver, but authentication requirements are not specified in the CVE data.