Known vulnerabilities in IBM Qradar SIEM 7.4.3 Fix Pack 2 - page 2

Vendor: IBM Corporation
Software: IBM Qradar SIEM
Version: 7.4.3 Fix Pack 2
Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 118
Public exploits: 13
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Qradar SIEM version 7.4.3 Fix Pack 2 IBM Qradar SIEM 7.4.3 Fix Pack 2 is affected by 118 vulnerabilities: 1 critical, 30 high, 43 medium, 44 low Critical High Medium Low

Vulnerabilities (118)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72159 - Improper Access Control
CVE-2022-34351		 CWE-284 Low
No
No
 7.4.3 Fix Pack 8, 7.5.0 Update Pack 4 13.02.2023 SB2023021331
#VU71190 - Incorrect Default Permissions
CVE-2023-22875		 CWE-276 Low
No
No
 - 16.01.2023 SB2023011643
#VU68307 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42889		 CWE-94 High
Public exploit available
Exploited
 7.4.3 Fix Pack 7 Interim Fix 1, 7.5.0 Update Pack 3 Interim Fix 3 14.10.2022 SB2022101405
SB2022102709
SB2022110306
and 91 more
#VU64724 - Incorrect Regular Expression
CVE-2022-33879		 CWE-185 Medium
No
No
 7.4.3 Fix Pack 6, 7.5.0 Update Pack 3 28.06.2022 SB2022062801
SB2022072805
SB2022092035
and 18 more
#VU64513 - Permissions, Privileges, and Access Controls
CVE-2021-33036		 CWE-264 Medium
No
No
 7.4.3 Fix Pack 6, 7.5.0 Update Pack 3 20.06.2022 SB2022062017
SB2022102620
SB2022102155
and 3 more
#VU64376 - Incomplete cleanup
CVE-2022-21127		 CWE-459 Low
No
No
 7.4.3 Fix Pack 8, 7.5.0 Update Pack 4 14.06.2022 SB2022061463
SB2022061464
SB2022061630
and 36 more
#VU64364 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21123		 CWE-200 Low
No
No
 7.4.3 Fix Pack 8, 7.5.0 Update Pack 4 14.06.2022 SB2022061454
SB2022061465
SB2022061463
and 97 more
#VU64366 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21166		 CWE-200 Low
No
No
 7.4.3 Fix Pack 8, 7.5.0 Update Pack 4 14.06.2022 SB2022061454
SB2022061466
SB2022061463
and 102 more
#VU63904 - Improper input validation
CVE-2022-30973		 CWE-20 Medium
No
No
 7.4.3 Fix Pack 6, 7.5.0 Update Pack 3 01.06.2022 SB2022060114
SB2022072805
SB2022092035
and 6 more
#VU63405 - Resource exhaustion
CVE-2022-25169		 CWE-400 Medium
No
No
 7.4.3 Fix Pack 6, 7.5.0 Update Pack 3 18.05.2022 SB2022051837
SB2022062703
SB2022062804
and 4 more
#VU63299 - Error Handling
CVE-2022-25762		 CWE-388 Medium
No
No
 7.4.3 Fix Pack 6, 7.5.0 Update Pack 3 17.05.2022 SB2022051715
SB2022071173
SB2022072094
and 14 more
#VU63225 - Data Handling
CVE-2022-29885		 CWE-19 Low
Public exploit available
No
 7.4.3 Fix Pack 6, 7.5.0 Update Pack 3 16.05.2022 SB2022051612
SB2022072044
SB20220720107
and 19 more
#VU63126 - Permissions, Privileges, and Access Controls
CVE-2022-1552		 CWE-264 Medium
No
No
 7.4.3 Fix Pack 6, 7.5.0 Update Pack 3 12.05.2022 SB2022051213
SB2022051303
SB2022051304
and 48 more
#VU62314 - Security Features
CVE-2022-22968		 CWE-254 Medium
Public exploit available
No
 7.4.3 Fix Pack 6, 7.5.0 Update Pack 3 14.04.2022 SB2022041405
SB2022042903
SB2022060324
and 31 more
#VU61671 - Memory corruption
CVE-2018-25032		 CWE-119 Medium
No
No
 7.4.3 Fix Pack 6, 7.5.0 Update Pack 3 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU61245 - Permissions, Privileges, and Access Controls
CVE-2022-0492		 CWE-264 Low
Public exploit available
Exploited
 7.4.3 Fix Pack 6, 7.5.0 Update Pack 3 10.03.2022 SB2022031028
SB2022031032
SB2022031033
and 63 more
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 7.4.3 Fix Pack 7, 7.5.0 Update Package 3 Interim Fix 02 28.12.2021 SB2021122816
SB2021123002
SB2022010601
and 197 more
#VU58977 - Deserialization of Untrusted Data
CVE-2021-4104		 CWE-502 Medium
No
No
 7.4.3 Fix Pack 7, 7.5.0 Update Package 3 Interim Fix 02, 7.5.0 Update Pack 7 IF01 15.12.2021 SB2021121507
SB2021121647
SB2021121720
and 119 more
#VU52449 - Improper input validation
CVE-2021-2163		 CWE-20 Medium
No
No
 7.4.3 Fix Pack 8, 7.5.0 Update Pack 4 21.04.2021 SB2021042115
SB2021042116
SB2021042117
and 99 more
#VU27960 - Deserialization of Untrusted Data
CVE-2019-17571		 CWE-502 High
No
No
 7.4.3 Fix Pack 7, 7.5.0 Update Package 3 Interim Fix 02, 7.5.0 Update Pack 7 IF01 18.05.2020 SB2019122027
SB2020051806
SB2020011497
and 28 more


Showing elements 21 - 40 out of 118