Known vulnerabilities in IBM Qradar SIEM 7.4.3 Fix Pack 4 - page 3

Version: 7.4.3 Fix Pack 4
Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Total vulnerabilities: 97
Public exploits: 11
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Qradar SIEM version 7.4.3 Fix Pack 4 IBM Qradar SIEM 7.4.3 Fix Pack 4 is affected by 97 vulnerabilities: 1 critical, 28 high, 34 medium, 34 low Critical High Medium Low

Vulnerabilities (97)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68739 - Heap-based Buffer Overflow
CVE-2021-37404
CWE-122 High
No
No
7.4.3 Fix Pack 6, 7.5.0 Update Pack 3 26.10.2022 SB2022062017
SB2022102620
SB2023092025
and 3 more
#VU67950 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22480
CWE-200 Medium
No
No
7.4.3 Fix Pack 7, 7.5.0 Update Pack 3 06.10.2022 SB2022100601
#VU65831 - Improper input validation
CVE-2022-2047
CWE-20 Low
No
No
7.4.3 Fix Pack 6, 7.5.0 Update Pack 3 27.07.2022 SB2022072723
SB2022080103
SB2022080260
and 41 more
#VU65830 - Resource Management Errors
CVE-2022-2048
CWE-399 Medium
No
No
7.4.3 Fix Pack 6, 7.5.0 Update Pack 3 27.07.2022 SB2022072723
SB2022080103
SB2022080260
and 44 more
#VU64156 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-1729
CWE-362 Low
No
No
7.4.3 Fix Pack 6, 7.5.0 Update Pack 3 10.06.2022 SB2022061213
SB2022061417
SB2022061630
and 79 more
#VU64070 - Use After Free
CVE-2022-1966
CWE-416 Low
Public exploit available
No
7.4.3 Fix Pack 6, 7.5.0 Update Pack 3 08.06.2022 SB2022060822
SB2022060823
SB2022060824
and 44 more
#VU62002 - Improper input validation
CVE-2022-1271
CWE-20 High
No
No
7.4.3 Fix Pack 6, 7.5.0 Update Pack 3 08.04.2022 SB2022040803
SB2022040804
SB2022040822
and 134 more
#VU61763 - Use After Free
CVE-2022-1154
CWE-416 High
No
No
7.4.3 Fix Pack 7, 7.5.0 Update Pack 3 31.03.2022 SB2022033113
SB2022033115
SB2022041528
and 33 more
#VU61671 - Memory corruption
CVE-2018-25032
CWE-119 Medium
No
No
7.4.3 Fix Pack 6, 7.5.0 Update Pack 3 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-22720
CWE-444 Medium
No
No
7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 56 more
#VU59642 - Resource exhaustion
CVE-2021-45960
CWE-400 Medium
No
No
7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 56 more
#VU56964 - Improper Access Control
CVE-2021-34429
CWE-284 Medium
Public exploit available
No
7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 30.09.2021 SB2021093014
SB2021093016
SB2022012745
and 25 more
#VU56217 - Memory corruption
CVE-2021-3634
CWE-119 High
No
No
7.4.3 Fix Pack 7, 7.5.0 Update Pack 3 31.08.2021 SB2021083135
SB2021083136
SB2022011903
and 46 more
#VU55853 - Integer overflow
CVE-2021-38185
CWE-190 High
Public exploit available
No
7.4.3 Fix Pack 7, 7.5.0 Update Pack 3 16.08.2021 SB2021081602
SB2021090901
SB2022051160
and 21 more
#VU55642 - Insufficient Session Expiration
CVE-2021-34428
CWE-613 Low
No
No
7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 08.08.2021 SB2021080801
SB2021080803
SB2021081922
and 25 more
#VU55035 - Information Exposure Through Timing Discrepancy
CVE-2020-15522
CWE-208 Medium
No
No
7.4.3 Fix Pack 6, 7.5.0 Update Pack 3 20.07.2021 SB2021072033
SB2021062601
SB2022062815
and 11 more
#VU53973 - Improper input validation
CVE-2021-28169
CWE-20 Medium
No
No
7.3.3 Fix Pack 10, 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 09.06.2021 SB2021060910
SB2021061815
SB2021081922
and 36 more
#VU51878 - Exposure of sensitive information to an unauthorized actor
CVE-2021-28163
CWE-200 Medium
No
No
7.3.3 Fix Pack 10, 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 01.04.2021 SB2021040179
SB2021050704
SB2021051321
and 27 more
#VU51877 - Improper input validation
CVE-2021-28164
CWE-20 Medium
Public exploit available
No
7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 01.04.2021 SB2021040179
SB2021050704
SB2021051321
and 22 more
#VU51876 - Resource exhaustion
CVE-2021-28165
CWE-400 Medium
No
No
7.3.3 Fix Pack 10, 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 3, 7.4.3 Fix Pack 4, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2 01.04.2021 SB2021040179
SB2021042208
SB2021050704
and 56 more


Showing elements 41 - 60 out of 97