Known vulnerabilities in IBM Qradar SIEM 7.3.3 Fix Pack 4 - page 3

Vendor: IBM Corporation
Software: IBM Qradar SIEM
Version: 7.3.3 Fix Pack 4
Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 88
Public exploits: 13
Known exploited (KEV): 4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Qradar SIEM version 7.3.3 Fix Pack 4 IBM Qradar SIEM 7.3.3 Fix Pack 4 is affected by 88 vulnerabilities: 1 critical, 21 high, 32 medium, 34 low Critical High Medium Low

Vulnerabilities (88)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65817 - Improper input validation
CVE-2018-1294		 CWE-20 Medium
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 27.07.2022 SB2022072718
SB2018013110
#VU65815 - Permissions, Privileges, and Access Controls
CVE-2021-39088		 CWE-264 Low
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 27.07.2022 SB2022072716
#VU63976 - Improper input validation
CVE-2021-22060		 CWE-20 Low
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 03.06.2022 SB2022060324
SB2022060716
SB2022082436
and 9 more
#VU61394 - UNIX Symbolic Link (Symlink) Following
CVE-2021-31566		 CWE-61 Low
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 15.03.2022 SB2022031530
SB2022031601
SB2022032445
and 27 more
#VU61393 - UNIX Symbolic Link (Symlink) Following
CVE-2021-23177		 CWE-61 Low
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 15.03.2022 SB2022031530
SB2022031601
SB2022032445
and 25 more
#VU61295 - Memory corruption
CVE-2022-23219		 CWE-119 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 14.03.2022 SB2022031429
SB2022031430
SB2022031526
and 51 more
#VU61294 - Memory corruption
CVE-2022-23218		 CWE-119 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 14.03.2022 SB2022031429
SB2022031430
SB2022031526
and 38 more
#VU61293 - Off-by-one Error
CVE-2021-3999		 CWE-193 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 14.03.2022 SB2022031429
SB2022031430
SB2022031526
and 36 more
#VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-22720		 CWE-444 Medium
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 56 more
#VU60922 - Use After Free
CVE-2022-23308		 CWE-416 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 01.03.2022 SB2022030109
SB2022030110
SB2022031503
and 59 more
#VU60842 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-24407		 CWE-89 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 24.02.2022 SB2022022409
SB2022022410
SB2022022421
and 67 more
#VU60786 - Heap-based Buffer Overflow
CVE-2022-0361		 CWE-122 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 22.02.2022 SB2022022221
SB2022031527
SB2022032446
and 31 more
#VU60783 - Heap-based Buffer Overflow
CVE-2022-0392		 CWE-122 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 22.02.2022 SB2022022221
SB2022031527
SB2022032446
and 27 more
#VU60772 - Heap-based Buffer Overflow
CVE-2022-0359		 CWE-122 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 22.02.2022 SB2022022220
SB2022022221
SB2022031527
and 30 more
#VU60769 - Heap-based Buffer Overflow
CVE-2022-0261		 CWE-122 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 22.02.2022 SB2022022220
SB2022022221
SB2022031527
and 32 more
#VU59043 - Missing release of memory after effective lifetime
CVE-2021-3677		 CWE-401 Low
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 16.12.2021 SB2021121641
SB2021121642
SB2021121643
and 17 more
#VU55642 - Insufficient Session Expiration
CVE-2021-34428		 CWE-613 Low
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 08.08.2021 SB2021080801
SB2021080803
SB2021081922
and 25 more
#VU53973 - Improper input validation
CVE-2021-28169		 CWE-20 Medium
No
No
 7.3.3 Fix Pack 10, 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 09.06.2021 SB2021060910
SB2021061815
SB2021081922
and 36 more
#VU51878 - Exposure of sensitive information to an unauthorized actor
CVE-2021-28163		 CWE-200 Medium
No
No
 7.3.3 Fix Pack 10, 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 01.04.2021 SB2021040179
SB2021050704
SB2021051321
and 27 more
#VU7654 - Improper input validation
CVE-2017-9801		 CWE-20 Low
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 02.08.2017 SB2017080203
SB2018042602
SB2022072718


Showing elements 41 - 60 out of 88