Known vulnerabilities in QRadar Suite 1.10.13.0

Vendor: IBM Corporation
Software: QRadar Suite
Version: 1.10.13.0
Software CPE: cpe:2.3:a:ibm_corporation:qradar:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 189
Public exploits: 15
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting QRadar Suite version 1.10.13.0 QRadar Suite 1.10.13.0 is affected by 189 vulnerabilities: 1 critical, 20 high, 131 medium, 37 low Critical High Medium Low

Vulnerabilities (189)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100117 - Improper input validation
CVE-2024-21534		 CWE-20 High
Public exploit available
No
 1.10.27.0 08.11.2024 SB2024110840
SB2024110841
SB2024111516
and 17 more
#VU100116 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-21529		 CWE-1321 High
No
No
 1.10.27.0 08.11.2024 SB2024110839
SB2024110841
SB2024112732
#VU99261 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-47875		 CWE-79 Medium
No
No
 1.10.27.0 22.10.2024 SB20241022382
SB20241022383
SB20241022392
and 27 more
#VU98820 - Resource exhaustion
CVE-2024-47874		 CWE-400 Medium
No
No
 1.10.27.0 18.10.2024 SB2024101827
SB2024101835
SB2024101837
and 8 more
#VU98132 - Inefficient Regular Expression Complexity
CVE-2024-45296		 CWE-1333 Low
No
No
 1.10.27.0 08.10.2024 SB2024100822
SB2024100823
SB2024100826
and 87 more
#VU98131 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43800		 CWE-79 Medium
No
No
 1.10.27.0 08.10.2024 SB2024100821
SB2024100824
SB2024100825
and 48 more
#VU97768 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43799		 CWE-79 Low
No
No
 1.10.27.0 30.09.2024 SB2024093022
SB2024100824
SB2024100825
and 50 more
#VU97758 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-45801		 CWE-1321 Medium
No
No
 1.10.27.0 27.09.2024 SB2024092751
SB2024100823
SB2024100827
and 32 more
#VU97224 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38816		 CWE-22 Medium
Public exploit available
No
 1.10.27.0 12.09.2024 SB2024091290
SB20241014121
SB20241015124
and 24 more
#VU97217 - Resource exhaustion
CVE-2024-34158		 CWE-400 Medium
No
No
 1.10.26.0, 1.10.27.0 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 76 more
#VU97216 - Resource exhaustion
CVE-2024-34156		 CWE-400 Medium
No
No
 1.10.26.0, 1.10.27.0 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 143 more
#VU97215 - Resource exhaustion
CVE-2024-34155		 CWE-400 Medium
No
No
 1.10.26.0, 1.10.27.0 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 81 more
#VU97209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43796		 CWE-79 Medium
No
No
 1.10.27.0 12.09.2024 SB2024091250
SB2024091251
SB2024091252
and 52 more
#VU97208 - Asymmetric Resource Consumption (Amplification)
CVE-2024-45590		 CWE-405 Medium
Public exploit available
No
 1.10.27.0 12.09.2024 SB2024091249
SB2024091251
SB2024091252
and 59 more
#VU96744 - Type confusion
CVE-2024-6119		 CWE-843 Medium
No
No
 1.10.27.0 03.09.2024 SB2024090364
SB2024090365
SB2024090384
and 99 more
#VU96058 - Exposure of sensitive information to an unauthorized actor
CVE-2023-50314		 CWE-200 Low
No
No
 1.10.26.0, 1.10.27.0 15.08.2024 SB2024081566
SB2024091324
SB2024091814
and 44 more
#VU93077 - Improper input validation
CVE-2024-38428		 CWE-20 Medium
No
No
 1.10.26.0, 1.10.27.0 22.06.2024 SB2024062208
SB2024062219
SB2024062421
and 45 more
#VU92406 - Incorrect Regular Expression
CVE-2024-4067		 CWE-185 Medium
No
No
 1.10.27.0 20.06.2024 SB20240620121
SB2024062832
SB2024070501
and 41 more
#VU84381 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-5764		 CWE-94 Medium
No
No
 1.10.27.0 13.12.2023 SB2023121315
SB2023121316
SB2023121317
and 16 more
#VU81467 - UNIX Symbolic Link (Symlink) Following
CVE-2023-5115		 CWE-61 Low
No
No
 1.10.27.0 04.10.2023 SB2023100466
SB2023100475
SB2023101275
and 9 more


Showing elements 1 - 20 out of 189