Known vulnerabilities in IBM Qradar SIEM 7.4.3 Fix Pack 4 Interim Fix 03 - page 4

Vendor: IBM Corporation
Software: IBM Qradar SIEM
Version: 7.4.3 Fix Pack 4 Interim Fix 03
Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 80
Public exploits: 10
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Qradar SIEM version 7.4.3 Fix Pack 4 Interim Fix 03 IBM Qradar SIEM 7.4.3 Fix Pack 4 Interim Fix 03 is affected by 80 vulnerabilities: 1 critical, 20 high, 31 medium, 28 low Critical High Medium Low

Vulnerabilities (80)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU63976 - Improper input validation
CVE-2021-22060		 CWE-20 Low
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 03.06.2022 SB2022060324
SB2022060716
SB2022082436
and 9 more
#VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-22720		 CWE-444 Medium
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 56 more
#VU60842 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-24407		 CWE-89 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 24.02.2022 SB2022022409
SB2022022410
SB2022022421
and 67 more
#VU60527 - Resource exhaustion
CVE-2021-43859		 CWE-400 Medium
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 11.02.2022 SB2022021102
SB2022021103
SB2022042250
and 26 more
#VU60007 - Improper input validation
CVE-2021-4034		 CWE-20 Medium
Public exploit available
Exploited
 7.3.3 Fix Pack 10 Interim Fix 02, 7.4.3 Fix Pack 4 Interim Fix 04, 7.5.0 Update Pack 1 26.01.2022 SB2022012601
SB2022012604
SB2022012605
and 51 more
#VU59649 - Integer overflow
CVE-2022-22826		 CWE-190 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 54 more
#VU59648 - Integer overflow
CVE-2022-22825		 CWE-190 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 56 more
#VU59647 - Integer overflow
CVE-2022-22824		 CWE-190 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 57 more
#VU59646 - Integer overflow
CVE-2022-22823		 CWE-190 High
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 57 more
#VU59642 - Resource exhaustion
CVE-2021-45960		 CWE-400 Medium
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 56 more
#VU59056 - Memory corruption
CVE-2021-44790		 CWE-119 Critical
Public exploit available
No
 7.3.3 Fix Pack 10 Interim Fix 02, 7.4.3 Fix Pack 4 Interim Fix 04, 7.5.0 Update Pack 1 20.12.2021 SB2021122005
SB2021122021
SB2022010513
and 50 more
#VU59043 - Missing release of memory after effective lifetime
CVE-2021-3677		 CWE-401 Low
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 16.12.2021 SB2021121641
SB2021121642
SB2021121643
and 17 more
#VU56964 - Improper Access Control
CVE-2021-34429		 CWE-284 Medium
Public exploit available
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 30.09.2021 SB2021093014
SB2021093016
SB2022012745
and 25 more
#VU56681 - NULL Pointer Dereference
CVE-2021-34798		 CWE-476 Medium
No
No
 7.3.3 Fix Pack 10 Interim Fix 02, 7.4.3 Fix Pack 4 Interim Fix 04, 7.5.0 Update Pack 1 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56679 - Memory corruption
CVE-2021-39275		 CWE-119 Medium
No
No
 7.3.3 Fix Pack 10 Interim Fix 02, 7.4.3 Fix Pack 4 Interim Fix 04, 7.5.0 Update Pack 1 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU55642 - Insufficient Session Expiration
CVE-2021-34428		 CWE-613 Low
No
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 08.08.2021 SB2021080801
SB2021080803
SB2021081922
and 25 more
#VU53973 - Improper input validation
CVE-2021-28169		 CWE-20 Medium
No
No
 7.3.3 Fix Pack 10, 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 09.06.2021 SB2021060910
SB2021061815
SB2021081922
and 36 more
#VU51878 - Exposure of sensitive information to an unauthorized actor
CVE-2021-28163		 CWE-200 Medium
No
No
 7.3.3 Fix Pack 10, 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 01.04.2021 SB2021040179
SB2021050704
SB2021051321
and 27 more
#VU51877 - Improper input validation
CVE-2021-28164		 CWE-20 Medium
Public exploit available
No
 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 01.04.2021 SB2021040179
SB2021050704
SB2021051321
and 22 more
#VU51876 - Resource exhaustion
CVE-2021-28165		 CWE-400 Medium
No
No
 7.3.3 Fix Pack 10, 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 01.04.2021 SB2021040179
SB2021042208
SB2021050704
and 56 more


Showing elements 61 - 80 out of 80