Known vulnerabilities in IBM Qradar SIEM 7.3.1 Patch 1 - page 3
Vendor:
IBM Corporation
Software:
IBM Qradar SIEM
Version:
7.3.1 Patch 1
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
74
Public exploits:
14
Known exploited (KEV):
4
Vulnerabilities by Severity
7.5.0 Update Pack 16
7.5.0 Update Pack 15 IF04
7.5.0 Update Pack 15 IF03
7.5.0 Update Pack 15 IF02
7.5.0 Update Pack 15 IF05
7.5.0 Update Pack 15
7.5.0 Update Pack 15 IF01
7.5.0 Update Pack 10 IF03
7.5.0 Update Pack 14 IF05
7.5.0 Update Pack 14 IF04
7.5.0 Update Pack 14 IF02
7.5.0 Update Pack 14 IF03
7.5.0 Update Pack 14 IF01
7.5.0 Update Pack 14
7.5.0 Update Pack 13 IF02
7.5.0 Update Pack 13 IF01
7.5.0 UP12 IF02
7.5.0 UP12 IF03
7.5.0 Update Pack 13
7.5.0 Update Pack 12 IF01
7.5.0 Update Pack 12
7.5.0 Update Pack 12 IF03
7.5.0 Update Pack 12 IF02
7.5.0 Update Pack 11 IF04
7.5.0 Update Pack 11 IF03
7.5.0 Update Pack 11 IF02
7.5.0 Update Pack 11 IF01
7.5.0 Update Pack 11
7.5.0 UP10 IF02
7.5.0 UP10 IF01
7.5.0 UP10
7.5.0 UP9 IF03
7.5.0 UP9 IF02
7.5.0 UP9 IF01
7.5.0 UP9
7.5.0 UP8 IF03
7.5.0 UP8 IF02
7.5.0 UP8 IF01
7.5.0 UP8
7.5.0 UP7 IF06
7.5.0 Update Pack 7 IF05
7.5.0 Update Pack 7 IF04
7.5.0 Update Pack 7 IF03
7.5.0 Update Pack 7 IF02
7.5.0 Update Pack 7 IF01
7.5.0 Update Pack 7
7.5.0 Update Pack 6
7.5.0 Update Pack 5 IF02
7.5.0 Update Pack 5 IF01
7.5.0 Update Pack 5
7.4.3 Fix Pack 9
7.4.3 Fix Pack 8
7.5.0 Update Pack 4
7.5.0 Update Pack 3 Interim Fix 3
7.4.3 Fix Pack 7 Interim Fix 1
7.5.0 Update Package 3 Interim Fix 02
7.4.3 Fix Pack 7
7.5.0 Update Pack 3
7.5.0 Update Pack 2
7.4.3 Fix Pack 6
7.3.3 Fix Pack 12
7.4.3
7.4.3 Fix Pack 5
7.3.3 Fix Pack 11
7.3
7.3.3 Fix Pack 10 Interim Fix 02
7.3.3 Fix Pack 10 Interim Fix 01
7.4.3 Fix Pack 4 Interim Fix 04
7.4.3 Fix Pack 4 Interim Fix 03
7.4.3 Fix Pack 4 Interim Fix 02
7.4.3 Fix Pack 4 Interim Fix 01
7.5.0 Update Pack 1
7.5.0
7.4.2
7.4.1
7.4.0
7.3.3 Fix Pack 10
7.3.3 Fix Pack 9
7.3.3 Fix Pack 8
7.3.3 Fix Pack 7
7.3.3 Fix Pack 6
7.3.3 Fix Pack 5
7.3.3 Fix Pack 4
7.3.3 Fix Pack 3
7.3.3 Fix Pack 2
7.3.3 Fix Pack 1
7.3.1
7.3.3
7.3.2
7.4.3 Fix Pack 4
7.4.3 Fix Pack 3
7.4.3 Fix Pack 1
-
7.4.3 Fix Pack 2
7.4
7.3.1 Patch 7
7.3.1 Patch 6
7.3.1 Patch 5
7.2.8 Patch 14
7.2.8 Patch 13
7.3.1 Patch 4
7.3.0 Patch 7
7.3.0 Patch 6
7.3.0 Patch 5
7.3.0 Patch 4
7.3.0 Patch 3
7.3.0 Patch 2
7.3.0 Patch 1
7.2.8 Patch 12
7.3.1 Patch 3
7.2.8 Patch 11
7.2.8 Patch 10
7.2.8 Patch 9
7.2.8 Patch 8
7.2.8 Patch 7
7.2.8 Patch 6
7.2.8 Patch 5
7.2.8 Patch 4
7.2.8 Patch 3
7.2.8 Patch 2
7.2.8 Patch 1
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.3.1 Patch 2
7.3.1 Patch 1
7.3.0
Vulnerabilities (74)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU63976 - Improper input validation CVE-2021-22060 |
CWE-20 | Low | 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 | 03.06.2022 |
SB2022060324 SB2022060716 SB2022082436 and 9 more |
||
| #VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-22720 |
CWE-444 | Medium | 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 | 14.03.2022 |
SB2022031416 SB2022031504 SB2022031724 and 56 more |
||
| #VU60842 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2022-24407 |
CWE-89 | High | 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 | 24.02.2022 |
SB2022022409 SB2022022410 SB2022022421 and 67 more |
||
| #VU60007 - Improper input validation CVE-2021-4034 |
CWE-20 | Medium | 7.3.3 Fix Pack 10 Interim Fix 02, 7.4.3 Fix Pack 4 Interim Fix 04, 7.5.0 Update Pack 1 | 26.01.2022 |
SB2022012601 SB2022012604 SB2022012605 and 51 more |
||
| #VU59056 - Memory corruption CVE-2021-44790 |
CWE-119 | Critical | 7.3.3 Fix Pack 10 Interim Fix 02, 7.4.3 Fix Pack 4 Interim Fix 04, 7.5.0 Update Pack 1 | 20.12.2021 |
SB2021122005 SB2021122021 SB2022010513 and 50 more |
||
| #VU59043 - Missing release of memory after effective lifetime CVE-2021-3677 |
CWE-401 | Low | 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 | 16.12.2021 |
SB2021121641 SB2021121642 SB2021121643 and 17 more |
||
| #VU56681 - NULL Pointer Dereference CVE-2021-34798 |
CWE-476 | Medium | 7.3.3 Fix Pack 10 Interim Fix 02, 7.4.3 Fix Pack 4 Interim Fix 04, 7.5.0 Update Pack 1 | 17.09.2021 |
SB2021091706 SB2021091707 SB2021092301 and 44 more |
||
| #VU56679 - Memory corruption CVE-2021-39275 |
CWE-119 | Medium | 7.3.3 Fix Pack 10 Interim Fix 02, 7.4.3 Fix Pack 4 Interim Fix 04, 7.5.0 Update Pack 1 | 17.09.2021 |
SB2021091706 SB2021091707 SB2021092301 and 44 more |
||
| #VU56393 - Use After Free CVE-2021-3715 |
CWE-416 | Low | 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 | 08.09.2021 |
SB2021090806 SB2021090918 SB2021090919 and 31 more |
||
| #VU56242 - Missing Authorization CVE-2020-27777 |
CWE-862 | Low | 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 | 01.09.2021 |
SB2020121569 SB2021090127 SB2021090130 and 13 more |
||
| #VU56241 - Command injection CVE-2021-29154 |
CWE-77 | Low | 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 | 01.09.2021 |
SB2021040820 SB2021090127 SB2021090128 and 44 more |
||
| #VU56240 - Memory corruption CVE-2021-29650 |
CWE-119 | Low | 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 | 01.09.2021 |
SB2021033033 SB2021090127 SB2021090128 and 44 more |
||
| #VU56017 - Out-of-bounds write CVE-2021-22555 |
CWE-787 | Low | 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 | 20.08.2021 |
SB2021070718 SB2021082206 SB2021083120 and 53 more |
||
| #VU55642 - Insufficient Session Expiration CVE-2021-34428 |
CWE-613 | Low | 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 | 08.08.2021 |
SB2021080801 SB2021080803 SB2021081922 and 25 more |
||
| #VU55257 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2021-32399 |
CWE-362 | Low | 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 | 22.07.2021 |
SB2021051144 SB2021072247 SB2021072248 and 58 more |
||
| #VU53973 - Improper input validation CVE-2021-28169 |
CWE-20 | Medium | 7.3.3 Fix Pack 10, 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 | 09.06.2021 |
SB2021060910 SB2021061815 SB2021081922 and 36 more |
||
| #VU51878 - Exposure of sensitive information to an unauthorized actor CVE-2021-28163 |
CWE-200 | Medium | 7.3.3 Fix Pack 10, 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 | 01.04.2021 |
SB2021040179 SB2021050704 SB2021051321 and 27 more |
||
| #VU21785 - Improper input validation CVE-2019-9924 |
CWE-20 | Low | 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 | 15.10.2019 |
SB2019032210 SB2019040917 SB2020040114 and 11 more |
||
| #VU15583 - Double Free CVE-2018-18751 |
CWE-415 | Low | 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 | 30.10.2018 |
SB2018103007 SB2019082503 SB2019110609 and 14 more |
||
| #VU37620 - Exposure of sensitive information to an unauthorized actor CVE-2017-15713 |
CWE-200 | Medium | 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 | 19.01.2018 |
SB2017060509 SB2021120219 SB2021120336 and 7 more |
Showing elements 41 - 60 out of 74