Known vulnerabilities in IBM Qradar SIEM 7.3.1 Patch 5 - page 4

Vendor: IBM Corporation
Software: IBM Qradar SIEM
Version: 7.3.1 Patch 5
Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 72
Public exploits: 12
Known exploited (KEV): 4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Qradar SIEM version 7.3.1 Patch 5 IBM Qradar SIEM 7.3.1 Patch 5 is affected by 72 vulnerabilities: 1 critical, 13 high, 29 medium, 29 low Critical High Medium Low

Vulnerabilities (72)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU58476 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-29849		 CWE-79 Low
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 4 01.12.2021 SB2021120116
#VU53232 - Missing release of memory after effective lifetime
CVE-2021-32028		 CWE-401 Medium
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 4 13.05.2021 SB2021051316
SB2021051605
SB2021052507
and 41 more
#VU53231 - Integer overflow
CVE-2021-32027		 CWE-190 Medium
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 4 13.05.2021 SB2021051316
SB2021051605
SB2021052507
and 43 more
#VU52448 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-2161		 CWE-94 Medium
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 21.04.2021 SB2021042115
SB2021042116
SB2021042117
and 45 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425		 CWE-22 Low
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 15.04.2021 SB2021041510
SB2021081922
SB2021093016
and 121 more
#VU51939 - Improper input validation
CVE-2021-22696		 CWE-20 Medium
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 06.04.2021 SB2021040608
SB2021120219
SB2021120336
and 8 more
#VU50000 - Permissions, Privileges, and Access Controls
CVE-2020-9492		 CWE-264 Medium
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 26.01.2021 SB2021012612
SB2021120219
SB2021120336
and 12 more
#VU49857 - Improper input validation
CVE-2020-13954		 CWE-20 Medium
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 20.01.2021 SB2021012079
SB2021042320
SB2021120219
and 7 more
#VU27702 - Resource exhaustion
CVE-2020-7226		 CWE-400 Medium
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 12.05.2020 SB2020012423
SB2021101936
SB2021120219
and 4 more
#VU35193 - Memory corruption
CVE-2018-11768		 CWE-119 Medium
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 04.10.2019 SB2017060509
SB2021120219
SB2021120336
and 3 more
#VU18689 - Permissions, Privileges, and Access Controls
CVE-2018-8029		 CWE-264 High
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 06.06.2019 SB2019060604
SB2021120219
SB2021120336
and 4 more
#VU17335 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2018-1733		 CWE-451 Low
No
No
 7.2.8 Patch 14, 7.3.1 Patch 7 24.01.2019 SB2019013108


Showing elements 61 - 80 out of 72