Known vulnerabilities in IBM Qradar SIEM 7.3.0 Patch 3 - page 3

Version: 7.3.0 Patch 3
Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Total vulnerabilities: 77
Public exploits: 14
Known exploited (KEV): 4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Qradar SIEM version 7.3.0 Patch 3 IBM Qradar SIEM 7.3.0 Patch 3 is affected by 77 vulnerabilities: 1 critical, 14 high, 29 medium, 33 low Critical High Medium Low

Vulnerabilities (77)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU63976 - Improper input validation
CVE-2021-22060
CWE-20 Low
No
No
7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 03.06.2022 SB2022060324
SB2022060716
SB2022082436
and 9 more
#VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-22720
CWE-444 Medium
No
No
7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 56 more
#VU60842 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-24407
CWE-89 High
No
No
7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 24.02.2022 SB2022022409
SB2022022410
SB2022022421
and 67 more
#VU60007 - Improper input validation
CVE-2021-4034
CWE-20 Medium
Public exploit available
Exploited
7.3.3 Fix Pack 10 Interim Fix 02, 7.4.3 Fix Pack 4 Interim Fix 04, 7.5.0 Update Pack 1 26.01.2022 SB2022012601
SB2022012604
SB2022012605
and 51 more
#VU59056 - Memory corruption
CVE-2021-44790
CWE-119 Critical
Public exploit available
No
7.3.3 Fix Pack 10 Interim Fix 02, 7.4.3 Fix Pack 4 Interim Fix 04, 7.5.0 Update Pack 1 20.12.2021 SB2021122005
SB2021122021
SB2022010513
and 50 more
#VU59043 - Missing release of memory after effective lifetime
CVE-2021-3677
CWE-401 Low
No
No
7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 16.12.2021 SB2021121641
SB2021121642
SB2021121643
and 17 more
#VU56681 - NULL Pointer Dereference
CVE-2021-34798
CWE-476 Medium
No
No
7.3.3 Fix Pack 10 Interim Fix 02, 7.4.3 Fix Pack 4 Interim Fix 04, 7.5.0 Update Pack 1 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56679 - Memory corruption
CVE-2021-39275
CWE-119 Medium
No
No
7.3.3 Fix Pack 10 Interim Fix 02, 7.4.3 Fix Pack 4 Interim Fix 04, 7.5.0 Update Pack 1 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56393 - Use After Free
CVE-2021-3715
CWE-416 Low
No
No
7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 08.09.2021 SB2021090806
SB2021090918
SB2021090919
and 31 more
#VU56242 - Missing Authorization
CVE-2020-27777
CWE-862 Low
No
No
7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 01.09.2021 SB2020121569
SB2021090127
SB2021090130
and 13 more
#VU56241 - Command injection
CVE-2021-29154
CWE-77 Low
No
No
7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 01.09.2021 SB2021040820
SB2021090127
SB2021090128
and 44 more
#VU56240 - Memory corruption
CVE-2021-29650
CWE-119 Low
No
No
7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 01.09.2021 SB2021033033
SB2021090127
SB2021090128
and 44 more
#VU56017 - Out-of-bounds write
CVE-2021-22555
CWE-787 Low
Public exploit available
Exploited
7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 20.08.2021 SB2021070718
SB2021082206
SB2021083120
and 53 more
#VU55642 - Insufficient Session Expiration
CVE-2021-34428
CWE-613 Low
No
No
7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 08.08.2021 SB2021080801
SB2021080803
SB2021081922
and 25 more
#VU55257 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-32399
CWE-362 Low
No
No
7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 22.07.2021 SB2021051144
SB2021072247
SB2021072248
and 58 more
#VU53973 - Improper input validation
CVE-2021-28169
CWE-20 Medium
No
No
7.3.3 Fix Pack 10, 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 09.06.2021 SB2021060910
SB2021061815
SB2021081922
and 36 more
#VU51878 - Exposure of sensitive information to an unauthorized actor
CVE-2021-28163
CWE-200 Medium
No
No
7.3.3 Fix Pack 10, 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 01.04.2021 SB2021040179
SB2021050704
SB2021051321
and 27 more
#VU21785 - Improper input validation
CVE-2019-9924
CWE-20 Low
No
No
7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 15.10.2019 SB2019032210
SB2019040917
SB2020040114
and 11 more
#VU15583 - Double Free
CVE-2018-18751
CWE-415 Low
No
No
7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 30.10.2018 SB2018103007
SB2019082503
SB2019110609
and 14 more
#VU37620 - Exposure of sensitive information to an unauthorized actor
CVE-2017-15713
CWE-200 Medium
No
No
7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 19.01.2018 SB2017060509
SB2021120219
SB2021120336
and 7 more


Showing elements 41 - 60 out of 77