Known vulnerabilities in IBM Qradar SIEM 7.4.3 Fix Pack 1 - page 6

Vendor: IBM Corporation

Software: IBM Qradar SIEM

Version: 7.4.3 Fix Pack 1

Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 119

Public exploits: 13

Known exploited (KEV): 6

Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Vulnerabilities (119)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU58476 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-29849	CWE-79	Low	No	No	7.3.3 Fix Pack 10, 7.4.3 Fix Pack 4	01.12.2021	SB2021120116
#VU56393 - Use After Free CVE-2021-3715	CWE-416	Low	No	No	7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4	08.09.2021	SB2021090806 SB2021090918 SB2021090919 and 31 more
#VU56242 - Missing Authorization CVE-2020-27777	CWE-862	Low	No	No	7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4	01.09.2021	SB2020121569 SB2021090127 SB2021090130 and 13 more
#VU56241 - Command injection CVE-2021-29154	CWE-77	Low	No	No	7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4	01.09.2021	SB2021040820 SB2021090127 SB2021090128 and 44 more
#VU56240 - Memory corruption CVE-2021-29650	CWE-119	Low	No	No	7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4	01.09.2021	SB2021033033 SB2021090127 SB2021090128 and 44 more
#VU56017 - Out-of-bounds write CVE-2021-22555	CWE-787	Low	Public exploit available	Exploited	7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4	20.08.2021	SB2021070718 SB2021082206 SB2021083120 and 53 more
#VU55864 - Exposure of sensitive information to an unauthorized actor CVE-2021-29880	CWE-200	Medium	No	No	7.4.3 Fix Pack 2	16.08.2021	SB2021081610
#VU53232 - Missing release of memory after effective lifetime CVE-2021-32028	CWE-401	Medium	No	No	7.3.3 Fix Pack 10, 7.4.3 Fix Pack 4	13.05.2021	SB2021051316 SB2021051605 SB2021052507 and 41 more
#VU53231 - Integer overflow CVE-2021-32027	CWE-190	Medium	No	No	7.3.3 Fix Pack 10, 7.4.3 Fix Pack 4	13.05.2021	SB2021051316 SB2021051605 SB2021052507 and 43 more
#VU52448 - Improper Control of Generation of Code ('Code Injection') CVE-2021-2161	CWE-94	Medium	No	No	7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4	21.04.2021	SB2021042115 SB2021042116 SB2021042117 and 45 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-29425	CWE-22	Low	No	No	7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4	15.04.2021	SB2021041510 SB2021081922 SB2021093016 and 121 more
#VU51939 - Improper input validation CVE-2021-22696	CWE-20	Medium	No	No	7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4	06.04.2021	SB2021040608 SB2021120219 SB2021120336 and 8 more
#VU50000 - Permissions, Privileges, and Access Controls CVE-2020-9492	CWE-264	Medium	No	No	7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4	26.01.2021	SB2021012612 SB2021120219 SB2021120336 and 12 more
#VU49857 - Improper input validation CVE-2020-13954	CWE-20	Medium	No	No	7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4	20.01.2021	SB2021012079 SB2021042320 SB2021120219 and 7 more
#VU27702 - Resource exhaustion CVE-2020-7226	CWE-400	Medium	No	No	7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4	12.05.2020	SB2020012423 SB2021101936 SB2021120219 and 4 more
#VU21785 - Improper input validation CVE-2019-9924	CWE-20	Low	No	No	7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4	15.10.2019	SB2019032210 SB2019040917 SB2020040114 and 11 more
#VU35193 - Memory corruption CVE-2018-11768	CWE-119	Medium	No	No	7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4	04.10.2019	SB2017060509 SB2021120219 SB2021120336 and 3 more
#VU18689 - Permissions, Privileges, and Access Controls CVE-2018-8029	CWE-264	High	No	No	7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4	06.06.2019	SB2019060604 SB2021120219 SB2021120336 and 4 more
#VU15583 - Double Free CVE-2018-18751	CWE-415	Low	No	No	7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4	30.10.2018	SB2018103007 SB2019082503 SB2019110609 and 14 more

Showing elements 101 - 120 out of 119

Known vulnerabilities in IBM Qradar SIEM 7.4.3 Fix Pack 1 - page 6

Vulnerabilities by Severity

Vulnerabilities (119)

Please verify you're human