Known vulnerabilities in IBM QRadar Data Synchronization App

Vendor: IBM Corporation
Software: IBM QRadar Data Synchronization App
Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_data_synchronization_app:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 81
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM QRadar Data Synchronization App IBM QRadar Data Synchronization App is affected by 81 known vulnerabilities: 13 high, 52 medium, 16 low Critical High Medium Low

Vulnerabilities (81)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117332 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-59343		 CWE-22 High
No
No
 3.3.0 17.10.2025 SB2025101702
SB2025101703
SB2025101704
and 22 more
#VU113227 - Uncaught Exception
CVE-2025-48997		 CWE-248 Medium
No
No
 3.3.0 25.07.2025 SB2025072557
SB2025072558
SB2025082202
and 9 more
#VU113173 - Use of Insufficiently Random Values
CVE-2025-7783		 CWE-330 Medium
Available
No
 3.2.2 23.07.2025 SB2025072332
SB2025072333
SB2025081876
and 62 more
#VU113032 - Uncaught Exception
CVE-2025-7338		 CWE-248 Medium
No
No
 3.3.0 18.07.2025 SB2025071811
SB2025082823
SB2025091818
and 8 more
#VU112890 - Inefficient Regular Expression Complexity
CVE-2025-5889		 CWE-1333 Low
No
No
 3.3.0 15.07.2025 SB2025071511
SB2025071512
SB2025071513
and 33 more
#VU112157 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-48387		 CWE-22 High
No
No
 3.3.0 03.07.2025 SB2025070352
SB2025070353
SB2025070354
and 13 more
#VU111106 - Uncaught Exception
CVE-2025-47944		 CWE-248 Medium
No
No
 3.3.0 12.06.2025 SB2025061251
SB2025061252
SB2025062505
and 12 more
#VU111105 - Missing release of memory after effective lifetime
CVE-2025-47935		 CWE-401 High
No
No
 3.3.0 12.06.2025 SB2025061250
SB2025061252
SB2025062505
and 13 more
#VU106282 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-12905		 CWE-59 High
No
No
 3.3.0 31.03.2025 SB2025033140
SB2025033150
SB2025033151
and 15 more
#VU105984 - Inefficient Regular Expression Complexity
CVE-2025-27789		 CWE-1333 Low
No
No
 3.2.2 24.03.2025 SB2025032476
SB2025041020
SB2025041691
and 45 more
#VU103227 - Use of Insufficiently Random Values
CVE-2025-22150		 CWE-330 Medium
No
No
 3.2.2 22.01.2025 SB2025012259
SB2025012439
SB2025012440
and 27 more
#VU103225 - Missing release of memory after effective lifetime
CVE-2025-23085		 CWE-401 Medium
No
No
 3.2.2 22.01.2025 SB2025012252
SB2025012439
SB2025012440
and 29 more
#VU98132 - Inefficient Regular Expression Complexity
CVE-2024-45296		 CWE-1333 Low
No
No
 3.2.1 08.10.2024 SB2024100822
SB2024100823
SB2024100826
and 87 more
#VU98131 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43800		 CWE-79 Medium
No
No
 3.2.1 08.10.2024 SB2024100821
SB2024100824
SB2024100825
and 48 more
#VU97768 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43799		 CWE-79 Low
No
No
 3.2.1 30.09.2024 SB2024093022
SB2024100824
SB2024100825
and 50 more
#VU97208 - Asymmetric Resource Consumption (Amplification)
CVE-2024-45590		 CWE-405 Medium
Available
No
 3.2.1 12.09.2024 SB2024091249
SB2024091251
SB2024091252
and 59 more
#VU76617 - Server-Side Request Forgery (SSRF)
CVE-2023-28155		 CWE-918 Medium
No
No
 3.2.1 30.05.2023 SB2023053012
SB2023053141
SB2023062120
and 17 more
#VU17068 - Out-of-bounds read
CVE-2019-6283		 CWE-125 Medium
No
No
 3.2.1 17.01.2019 SB2019011710
SB2021122238
SB2022070826
and 5 more
#VU16234 - Buffer over-read
CVE-2018-19839		 CWE-126 Low
No
No
 3.2.1 04.12.2018 SB2018120407
SB2021122238
SB2022070826
and 4 more
#VU36350 - NULL Pointer Dereference
CVE-2018-19797		 CWE-476 Medium
No
No
 3.2.1 03.12.2018 SB2018120318
SB2021122238
SB2022070826
and 5 more


Showing elements 1 - 20 out of 81