Known vulnerabilities in IBM Qradar SIEM 7.5.0 Update Pack 5 IF01 - page 29

Version: 7.5.0 Update Pack 5 IF01
Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Total vulnerabilities: 584
Public exploits: 34
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Qradar SIEM version 7.5.0 Update Pack 5 IF01 IBM Qradar SIEM 7.5.0 Update Pack 5 IF01 is affected by 584 vulnerabilities: 5 critical, 59 high, 201 medium, 319 low Critical High Medium Low

Vulnerabilities (584)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82994 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-43057
CWE-79 Low
No
No
7.5.0 Update Pack 7 IF02 10.11.2023 SB2023111090
SB2023111604
#VU82572 - Improper Access Control
CVE-2023-43041
CWE-284 Low
No
No
7.5.0 Update Pack 7 IF01 30.10.2023 SB2023103068
#VU80931 - Resource exhaustion
CVE-2023-3341
CWE-400 Medium
No
No
7.5.0 Update Pack 7 IF02 20.09.2023 SB2023092048
SB2023092050
SB2023092148
and 90 more
#VU80188 - Cryptographic Issues
CVE-2023-20900
CWE-310 Medium
No
No
7.5.0 Update Pack 7 IF02 31.08.2023 SB2023083119
SB2023083154
SB2023083155
and 38 more
#VU79878 - Incorrect Authorization
CVE-2023-3899
CWE-863 Low
No
No
7.5.0 Update Pack 7 IF02 23.08.2023 SB2023082308
SB2023082309
SB2023082310
and 44 more
#VU77649 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-26274
CWE-79 Medium
No
No
7.5.0 Update Pack 6 22.06.2023 SB2023062275
#VU77648 - Improper Access Control
CVE-2023-26273
CWE-284 Low
No
No
7.5.0 Update Pack 6 22.06.2023 SB2023062275
#VU77647 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-26276
CWE-327 Low
No
No
7.5.0 Update Pack 6 22.06.2023 SB2023062275
#VU77646 - Authorization Bypass Through User-Controlled Key
CVE-2022-34352
CWE-639 Low
No
No
7.5.0 Update Pack 6, 7.5.0 Update Pack 7 IF01 22.06.2023 SB2023062275
SB2023103068
#VU72618 - Improper input validation
CVE-2023-24329
CWE-20 Medium
No
No
7.5.0 Update Pack 6, 7.5.0 Update Pack 7 IF01 28.02.2023 SB2023022819
SB2023022822
SB2023030832
and 158 more
#VU61799 - Out-of-bounds write
CVE-2020-36518
CWE-787 Medium
No
No
7.5.0 Update Pack 6 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU59693 - Deserialization of Untrusted Data
CVE-2020-9493
CWE-502 High
No
No
7.5.0 Update Pack 7 IF01 18.01.2022 SB2021061626
SB2022011819
SB2022012640
and 62 more
#VU59692 - Deserialization of Untrusted Data
CVE-2022-23302
CWE-502 High
No
No
7.5.0 Update Pack 7 IF01 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 60 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305
CWE-89 Medium
No
No
7.5.0 Update Pack 7 IF01 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 94 more
#VU58977 - Deserialization of Untrusted Data
CVE-2021-4104
CWE-502 Medium
No
No
7.4.3 Fix Pack 7, 7.5.0 Update Package 3 Interim Fix 02, 7.5.0 Update Pack 7 IF01 15.12.2021 SB2021121507
SB2021121647
SB2021121720
and 119 more
#VU49379 - Deserialization of Untrusted Data
CVE-2020-35490
CWE-502 High
No
No
7.5.0 Update Pack 6 17.12.2020 SB2021011105
SB2021042826
SB2021050708
and 16 more
#VU49380 - Deserialization of Untrusted Data
CVE-2020-35491
CWE-502 High
No
No
7.5.0 Update Pack 6 17.12.2020 SB2021011105
SB2021042826
SB2021050708
and 15 more
#VU27960 - Deserialization of Untrusted Data
CVE-2019-17571
CWE-502 High
No
No
7.4.3 Fix Pack 7, 7.5.0 Update Package 3 Interim Fix 02, 7.5.0 Update Pack 7 IF01 18.05.2020 SB2019122027
SB2020051806
SB2020011497
and 28 more
#VU27487 - Improper Certificate Validation
CVE-2020-9488
CWE-295 Low
No
No
7.5.0 Update Pack 7 IF01 04.05.2020 SB2020050406
SB2020071606
SB2020071620
and 67 more
#VU11268 - Deserialization of Untrusted Data
CVE-2018-7489
CWE-502 High
No
No
7.5.0 Update Pack 6 26.03.2018 SB2018021604
SB2018041910
SB2018050306
and 28 more


Showing elements 561 - 580 out of 584