Known vulnerabilities in IBM Qradar SIEM 7.4.3 Fix Pack 2 - page 5

Vendor: IBM Corporation
Software: IBM Qradar SIEM
Version: 7.4.3 Fix Pack 2
Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 118
Public exploits: 13
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Qradar SIEM version 7.4.3 Fix Pack 2 IBM Qradar SIEM 7.4.3 Fix Pack 2 is affected by 118 vulnerabilities: 1 critical, 30 high, 43 medium, 44 low Critical High Medium Low

Vulnerabilities (118)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65697 - Exposure of sensitive information to an unauthorized actor
CVE-2021-38936		 CWE-200 Low
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 22.07.2022 SB2022072211
#VU65561 - Improper Certificate Validation
CVE-2021-29755		 CWE-295 Medium
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 20.07.2022 SB20220720115
#VU65560 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22424		 CWE-200 Low
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 20.07.2022 SB20220720113
#VU61394 - UNIX Symbolic Link (Symlink) Following
CVE-2021-31566		 CWE-61 Low
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 15.03.2022 SB2022031530
SB2022031601
SB2022032445
and 27 more
#VU61393 - UNIX Symbolic Link (Symlink) Following
CVE-2021-23177		 CWE-61 Low
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 15.03.2022 SB2022031530
SB2022031601
SB2022032445
and 25 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778		 CWE-835 Medium
Public exploit available
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU61295 - Memory corruption
CVE-2022-23219		 CWE-119 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 14.03.2022 SB2022031429
SB2022031430
SB2022031526
and 51 more
#VU61294 - Memory corruption
CVE-2022-23218		 CWE-119 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 14.03.2022 SB2022031429
SB2022031430
SB2022031526
and 38 more
#VU61293 - Off-by-one Error
CVE-2021-3999		 CWE-193 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 14.03.2022 SB2022031429
SB2022031430
SB2022031526
and 36 more
#VU60922 - Use After Free
CVE-2022-23308		 CWE-416 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 01.03.2022 SB2022030109
SB2022030110
SB2022031503
and 59 more
#VU60786 - Heap-based Buffer Overflow
CVE-2022-0361		 CWE-122 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 22.02.2022 SB2022022221
SB2022031527
SB2022032446
and 31 more
#VU60783 - Heap-based Buffer Overflow
CVE-2022-0392		 CWE-122 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 22.02.2022 SB2022022221
SB2022031527
SB2022032446
and 27 more
#VU60772 - Heap-based Buffer Overflow
CVE-2022-0359		 CWE-122 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 22.02.2022 SB2022022220
SB2022022221
SB2022031527
and 30 more
#VU60769 - Heap-based Buffer Overflow
CVE-2022-0261		 CWE-122 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 22.02.2022 SB2022022220
SB2022022221
SB2022031527
and 32 more
#VU60007 - Improper input validation
CVE-2021-4034		 CWE-20 Medium
Public exploit available
Exploited
 7.3.3 Fix Pack 10 Interim Fix 02, 7.4.3 Fix Pack 4 Interim Fix 04, 7.5.0 Update Pack 1 26.01.2022 SB2022012601
SB2022012604
SB2022012605
and 51 more
#VU59056 - Memory corruption
CVE-2021-44790		 CWE-119 Critical
Public exploit available
No
 7.3.3 Fix Pack 10 Interim Fix 02, 7.4.3 Fix Pack 4 Interim Fix 04, 7.5.0 Update Pack 1 20.12.2021 SB2021122005
SB2021122021
SB2022010513
and 50 more
#VU56681 - NULL Pointer Dereference
CVE-2021-34798		 CWE-476 Medium
No
No
 7.3.3 Fix Pack 10 Interim Fix 02, 7.4.3 Fix Pack 4 Interim Fix 04, 7.5.0 Update Pack 1 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56679 - Memory corruption
CVE-2021-39275		 CWE-119 Medium
No
No
 7.3.3 Fix Pack 10 Interim Fix 02, 7.4.3 Fix Pack 4 Interim Fix 04, 7.5.0 Update Pack 1 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU55257 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-32399		 CWE-362 Low
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 22.07.2021 SB2021051144
SB2021072247
SB2021072248
and 58 more
#VU37620 - Exposure of sensitive information to an unauthorized actor
CVE-2017-15713		 CWE-200 Medium
No
No
 7.3.3 Fix Pack 10, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4 19.01.2018 SB2017060509
SB2021120219
SB2021120336
and 7 more


Showing elements 81 - 100 out of 118