Known vulnerabilities in IBM Qradar SIEM 7.2.8 Patch 5

Vendor: IBM Corporation

Software: IBM Qradar SIEM

Version: 7.2.8 Patch 5

Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 7

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Vulnerabilities (7)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU87855 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-50960	CWE-79	Low	No	No	7.5.0 Update Pack 8	27.03.2024	SB2024032725 SB2024062139
#VU17335 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2018-1733	CWE-451	Low	No	No	7.2.8 Patch 14, 7.3.1 Patch 7	24.01.2019	SB2019013108
#VU14121 - Exposure of sensitive information to an unauthorized actor CVE-2018-1612	CWE-200	Low	Public exploit available	No	7.2.8 Patch 12	30.07.2018	SB2018060610
#VU13058 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2017-1723	CWE-22	Low	No	No	-	30.05.2018	SB2018053010
#VU13057 - Permissions, Privileges, and Access Controls CVE-2017-1721	CWE-264	High	No	No	-	30.05.2018	SB2018053010
#VU13045 - Command injection CVE-2018-1418	CWE-77	Low	Public exploit available	No	-	30.05.2018	SB2018053002
#VU13056 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2017-1722	CWE-89	Low	No	No	-	28.05.2018	SB2018053010