Known vulnerabilities in IBM Qradar SIEM 7.3.3 Fix Pack 10 Interim Fix 01

Vendor: IBM Corporation
Software: IBM Qradar SIEM
Version: 7.3.3 Fix Pack 10 Interim Fix 01
Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 29
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Qradar SIEM version 7.3.3 Fix Pack 10 Interim Fix 01 IBM Qradar SIEM 7.3.3 Fix Pack 10 Interim Fix 01 is affected by 29 vulnerabilities: 1 critical, 11 high, 12 medium, 5 low Critical High Medium Low

Vulnerabilities (29)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87855 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-50960		 CWE-79 Low
No
No
 7.5.0 Update Pack 8 27.03.2024 SB2024032725
SB2024062139
#VU63976 - Improper input validation
CVE-2021-22060		 CWE-20 Low
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 03.06.2022 SB2022060324
SB2022060716
SB2022082436
and 9 more
#VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-22720		 CWE-444 Medium
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 56 more
#VU61246 - Use After Free
CVE-2021-4083		 CWE-416 Low
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 10.03.2022 SB2022031029
SB2022031033
SB2022031034
and 55 more
#VU60842 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-24407		 CWE-89 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 24.02.2022 SB2022022409
SB2022022410
SB2022022421
and 67 more
#VU60527 - Resource exhaustion
CVE-2021-43859		 CWE-400 Medium
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 11.02.2022 SB2022021102
SB2022021103
SB2022042250
and 26 more
#VU59650 - Integer overflow
CVE-2022-22827		 CWE-190 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 54 more
#VU59649 - Integer overflow
CVE-2022-22826		 CWE-190 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 54 more
#VU59648 - Integer overflow
CVE-2022-22825		 CWE-190 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 56 more
#VU59647 - Integer overflow
CVE-2022-22824		 CWE-190 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 57 more
#VU59646 - Integer overflow
CVE-2022-22823		 CWE-190 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 57 more
#VU59643 - Integer overflow
CVE-2021-46143		 CWE-190 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 58 more
#VU59642 - Resource exhaustion
CVE-2021-45960		 CWE-400 Medium
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 56 more
#VU59043 - Missing release of memory after effective lifetime
CVE-2021-3677		 CWE-401 Low
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 16.12.2021 SB2021121641
SB2021121642
SB2021121643
and 17 more
#VU56964 - Improper Access Control
CVE-2021-34429		 CWE-284 Medium
Public exploit available
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 30.09.2021 SB2021093014
SB2021093016
SB2022012745
and 25 more
#VU55642 - Insufficient Session Expiration
CVE-2021-34428		 CWE-613 Low
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 08.08.2021 SB2021080801
SB2021080803
SB2021081922
and 25 more
#VU53973 - Improper input validation
CVE-2021-28169		 CWE-20 Medium
No
No
 7.3.3 Fix Pack 10, 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 09.06.2021 SB2021060910
SB2021061815
SB2021081922
and 36 more
#VU51878 - Exposure of sensitive information to an unauthorized actor
CVE-2021-28163		 CWE-200 Medium
No
No
 7.3.3 Fix Pack 10, 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 01.04.2021 SB2021040179
SB2021050704
SB2021051321
and 27 more
#VU51877 - Improper input validation
CVE-2021-28164		 CWE-20 Medium
Public exploit available
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 01.04.2021 SB2021040179
SB2021050704
SB2021051321
and 22 more
#VU51876 - Resource exhaustion
CVE-2021-28165		 CWE-400 Medium
No
No
 7.3.3 Fix Pack 10, 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 01.04.2021 SB2021040179
SB2021042208
SB2021050704
and 56 more


Showing elements 1 - 20 out of 29