Known vulnerabilities in IBM Qradar SIEM 7.3.0 Patch 5

Vendor: IBM Corporation

Software: IBM Qradar SIEM

Version: 7.3.0 Patch 5

Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 77

Public exploits: 14

Known exploited (KEV): 4

Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Vulnerabilities (77)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU87855 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-50960	CWE-79	Low	No	No	7.5.0 Update Pack 8	27.03.2024	SB2024032725 SB2024062139
#VU56504 - Improper Control of Generation of Code ('Code Injection') CVE-2021-38647	CWE-94	High	Public exploit available	Exploited	-	14.09.2021	SB2021091418 SB2022090129 SB2022091908 and 1 more
#VU52501 - Server-Side Request Forgery (SSRF) CVE-2020-11987	CWE-918	Medium	No	No	7.3.3 Fix Pack 9, 7.4.3 Fix Pack 1	23.04.2021	SB2021042315 SB2021042316 SB2021042514 and 32 more
#VU51796 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-28657	CWE-835	Medium	No	No	7.3.3 Fix Pack 9, 7.4.3 Fix Pack 1	30.03.2021	SB2021033021 SB2022042284 SB2021062232 and 4 more
#VU51198 - Out-of-bounds write CVE-2021-20233	CWE-787	Low	Public exploit available	No	7.3.3 Fix Pack 9, 7.4.3 Fix Pack 1	03.03.2021	SB2021030311 SB2021030401 SB2021030402 and 37 more
#VU51197 - Out-of-bounds write CVE-2021-20225	CWE-787	Low	No	No	7.3.3 Fix Pack 9, 7.4.3 Fix Pack 1	03.03.2021	SB2021030311 SB2021030401 SB2021030402 and 37 more
#VU51196 - Improper preservation of permissions CVE-2021-3418	CWE-281	Low	No	No	7.3.3 Fix Pack 9, 7.4.3 Fix Pack 1	03.03.2021	SB2021030311 SB2021092209 SB2022090804
#VU51189 - Out-of-bounds write CVE-2020-25647	CWE-787	Low	No	No	7.3.3 Fix Pack 9, 7.4.3 Fix Pack 1	03.03.2021	SB2021030311 SB2021030401 SB2021030402 and 35 more
#VU51188 - Use After Free CVE-2020-25632	CWE-416	Low	Public exploit available	No	7.3.3 Fix Pack 9, 7.4.3 Fix Pack 1	03.03.2021	SB2021030311 SB2021030401 SB2021030402 and 37 more
#VU51014 - Resource Management Errors CVE-2021-25122	CWE-399	Medium	No	No	7.3.3 Fix Pack 8, 7.4.3 Fix Pack 1	01.03.2021	SB2021030115 SB2021031619 SB2021032519 and 23 more
#VU51012 - Deserialization of Untrusted Data CVE-2021-25329	CWE-502	Medium	No	No	7.3.3 Fix Pack 8, 7.4.3 Fix Pack 1	01.03.2021	SB2021030115 SB2021031620 SB2021040723 and 16 more
#VU50684 - Improper input validation CVE-2020-13949	CWE-20	Medium	No	No	7.3.3 Fix Pack 8, 7.4.3 Fix Pack 1	15.02.2021	SB2021021505 SB2021022701 SB2021030911 and 13 more
#VU50139 - Incorrect Default Permissions CVE-2020-8908	CWE-276	Low	No	No	7.3.3 Fix Pack 9, 7.4.3 Fix Pack 1, 7.5.0 Update Pack 9	11.12.2020	SB2020121114 SB2021031707 SB2021042104 and 62 more
#VU48779 - Resource Management Errors CVE-2020-17527	CWE-399	Medium	No	No	7.3.3 Fix Pack 8, 7.4.3 Fix Pack 1	03.12.2020	SB2020120401 SB2020120509 SB2020120510 and 21 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2020-25649	CWE-611	Medium	No	No	7.3.3 Fix Pack 8, 7.4.3 Fix Pack 1	03.12.2020	SB2020121510 SB2021020321 SB2021042112 and 68 more
#VU47481 - Improper input validation CVE-2020-13956	CWE-20	Medium	No	No	7.3.3 Fix Pack 9, 7.4.3 Fix Pack 1	09.10.2020	SB2020100902 SB2020101604 SB2021042104 and 77 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11023	CWE-79	Low	Public exploit available	Exploited	7.3.3 Fix Pack 9, 7.4.3 Fix Pack 1	05.05.2020	SB2020042126 SB2020052033 SB2020052103 and 180 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11022	CWE-79	Low	Public exploit available	No	7.3.3 Fix Pack 9, 7.4.3 Fix Pack 1	21.04.2020	SB2020042126 SB2020052033 SB2020052103 and 181 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2019-11358	CWE-1321	Low	Public exploit available	No	7.3.3 Fix Pack 9, 7.4.3 Fix Pack 1	28.03.2019	SB2019032804 SB2019041026 SB2019041801 and 155 more
#VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2015-9251	CWE-79	Low	No	No	7.3.3 Fix Pack 9, 7.4.3 Fix Pack 1	31.07.2018	SB2018080106 SB2019011705 SB2019100301 and 63 more

Showing elements 1 - 20 out of 77

Known vulnerabilities in IBM Qradar SIEM 7.3.0 Patch 5

Vulnerabilities by Severity

Vulnerabilities (77)

Please verify you're human