Known vulnerabilities in IBM Qradar SIEM 7.5.0 Update Pack 5 - page 29
Vendor:
IBM Corporation
Software:
IBM Qradar SIEM
Version:
7.5.0 Update Pack 5
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
619
Public exploits:
37
Known exploited (KEV):
13
Highest CVSSv4 Score:
9.4
Vulnerabilities by Severity
7.5.0 Update Pack 15 IF04
7.5.0 Update Pack 15 IF03
7.5.0 Update Pack 15 IF02
7.5.0 Update Pack 15 IF05
7.5.0 Update Pack 15
7.5.0 Update Pack 15 IF01
7.5.0 Update Pack 10 IF03
7.5.0 Update Pack 14 IF05
7.5.0 Update Pack 14 IF04
7.5.0 Update Pack 14 IF02
7.5.0 Update Pack 14 IF03
7.5.0 Update Pack 14 IF01
7.5.0 Update Pack 14
7.5.0 Update Pack 13 IF02
7.5.0 Update Pack 13 IF01
7.5.0 UP12 IF02
7.5.0 UP12 IF03
7.5.0 Update Pack 13
7.5.0 Update Pack 12 IF01
7.5.0 Update Pack 12
7.5.0 Update Pack 12 IF03
7.5.0 Update Pack 12 IF02
7.5.0 Update Pack 11 IF04
7.5.0 Update Pack 11 IF03
7.5.0 Update Pack 11 IF02
7.5.0 Update Pack 11 IF01
7.5.0 Update Pack 11
7.5.0 UP10 IF02
7.5.0 UP10 IF01
7.5.0 UP10
7.5.0 UP9 IF03
7.5.0 UP9 IF02
7.5.0 UP9 IF01
7.5.0 UP9
7.5.0 UP8 IF03
7.5.0 UP8 IF02
7.5.0 UP8 IF01
7.5.0 UP8
7.5.0 UP7 IF06
7.5.0 Update Pack 7 IF05
7.5.0 Update Pack 7 IF04
7.5.0 Update Pack 7 IF03
7.5.0 Update Pack 7 IF02
7.5.0 Update Pack 7 IF01
7.5.0 Update Pack 7
7.5.0 Update Pack 6
7.5.0 Update Pack 5 IF02
7.5.0 Update Pack 5 IF01
7.5.0 Update Pack 5
7.4.3 Fix Pack 9
7.4.3 Fix Pack 8
7.5.0 Update Pack 4
7.5.0 Update Pack 3 Interim Fix 3
7.4.3 Fix Pack 7 Interim Fix 1
7.5.0 Update Package 3 Interim Fix 02
7.4.3 Fix Pack 7
7.5.0 Update Pack 3
7.5.0 Update Pack 2
7.4.3 Fix Pack 6
7.3.3 Fix Pack 12
7.4.3
7.4.3 Fix Pack 5
7.3.3 Fix Pack 11
7.3
7.3.3 Fix Pack 10 Interim Fix 02
7.3.3 Fix Pack 10 Interim Fix 01
7.4.3 Fix Pack 4 Interim Fix 04
7.4.3 Fix Pack 4 Interim Fix 03
7.4.3 Fix Pack 4 Interim Fix 02
7.4.3 Fix Pack 4 Interim Fix 01
7.5.0 Update Pack 1
7.5.0
7.4.2
7.4.1
7.4.0
7.3.3 Fix Pack 10
7.3.3 Fix Pack 9
7.3.3 Fix Pack 8
7.3.3 Fix Pack 7
7.3.3 Fix Pack 6
7.3.3 Fix Pack 5
7.3.3 Fix Pack 4
7.3.3 Fix Pack 3
7.3.3 Fix Pack 2
7.3.3 Fix Pack 1
7.3.1
7.3.3
7.3.2
7.4.3 Fix Pack 4
7.4.3 Fix Pack 3
7.4.3 Fix Pack 1
-
7.4.3 Fix Pack 2
7.4
7.3.1 Patch 7
7.3.1 Patch 6
7.3.1 Patch 5
7.2.8 Patch 14
7.2.8 Patch 13
7.3.1 Patch 4
7.3.0 Patch 7
7.3.0 Patch 6
7.3.0 Patch 5
7.3.0 Patch 4
7.3.0 Patch 3
7.3.0 Patch 2
7.3.0 Patch 1
7.2.8 Patch 12
7.3.1 Patch 3
7.2.8 Patch 11
7.2.8 Patch 10
7.2.8 Patch 9
7.2.8 Patch 8
7.2.8 Patch 7
7.2.8 Patch 6
7.2.8 Patch 5
7.2.8 Patch 4
7.2.8 Patch 3
7.2.8 Patch 2
7.2.8 Patch 1
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.3.1 Patch 2
7.3.1 Patch 1
7.3.0
Vulnerabilities (619)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU82994 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-43057 |
CWE-79 | Low | 7.5.0 Update Pack 7 IF02 | 10.11.2023 |
SB2023111090 SB2023111604 |
||
| #VU82572 - Improper Access Control CVE-2023-43041 |
CWE-284 | Low | 7.5.0 Update Pack 7 IF01 | 30.10.2023 |
SB2023103068 |
||
| #VU81889 - Use of a Broken or Risky Cryptographic Algorithm CVE-2023-30994 |
CWE-327 | Medium | 7.5.0 Update Pack 7 | 11.10.2023 |
SB2023101151 |
||
| #VU80931 - Resource exhaustion CVE-2023-3341 |
CWE-400 | Medium | 7.5.0 Update Pack 7 IF02 | 20.09.2023 |
SB2023092048 SB2023092050 SB2023092148 and 90 more |
||
| #VU80188 - Cryptographic Issues CVE-2023-20900 |
CWE-310 | Medium | 7.5.0 Update Pack 7 IF02 | 31.08.2023 |
SB2023083119 SB2023083154 SB2023083155 and 38 more |
||
| #VU79878 - Incorrect Authorization CVE-2023-3899 |
CWE-863 | Low | 7.5.0 Update Pack 7 IF02 | 23.08.2023 |
SB2023082308 SB2023082309 SB2023082310 and 44 more |
||
| #VU79519 - Improper Control of Generation of Code ('Code Injection') CVE-2023-32697 |
CWE-94 | High | 7.5.0 Update Pack 7 | 15.08.2023 |
SB2023090805 SB2023090807 SB2023091411 and 7 more |
||
| #VU78454 - Untrusted Search Path CVE-2023-38408 |
CWE-426 | Medium | 7.5.0 Update Pack 7 | 20.07.2023 |
SB2023072068 SB2023072073 SB2023072074 and 73 more |
||
| #VU77612 - Resource exhaustion CVE-2023-2828 |
CWE-400 | Medium | 7.5.0 Update Pack 7 | 21.06.2023 |
SB2023062155 SB2023062201 SB2023062601 and 66 more |
||
| #VU77228 - Resource exhaustion CVE-2023-34149 |
CWE-400 | Medium | 7.5.0 Update Pack 7 | 13.06.2023 |
SB2023061351 SB2023070502 SB2023071316 and 7 more |
||
| #VU75486 - Improper input validation CVE-2023-29007 |
CWE-20 | Low | 7.5.0 Update Pack 7 | 25.04.2023 |
SB2023042553 SB2023042610 SB2023042629 and 48 more |
||
| #VU75484 - Improper Link Resolution Before File Access ('Link Following') CVE-2023-25652 |
CWE-59 | Low | 7.5.0 Update Pack 7 | 25.04.2023 |
SB2023042553 SB2023042610 SB2023042629 and 48 more |
||
| #VU75260 - Improper input validation CVE-2023-21930 |
CWE-20 | Medium | 7.5.0 Update Pack 7 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 191 more |
||
| #VU72618 - Improper input validation CVE-2023-24329 |
CWE-20 | Medium | 7.5.0 Update Pack 6, 7.5.0 Update Pack 7 IF01 | 28.02.2023 |
SB2023022819 SB2023022822 SB2023030832 and 158 more |
||
| #VU59693 - Deserialization of Untrusted Data CVE-2020-9493 |
CWE-502 | High | 7.5.0 Update Pack 7 IF01 | 18.01.2022 |
SB2021061626 SB2022011819 SB2022012640 and 62 more |
||
| #VU59692 - Deserialization of Untrusted Data CVE-2022-23302 |
CWE-502 | High | 7.5.0 Update Pack 7 IF01 | 18.01.2022 |
SB2022011818 SB2022012640 SB2022012641 and 60 more |
||
| #VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2022-23305 |
CWE-89 | Medium | 7.5.0 Update Pack 7 IF01 | 18.01.2022 |
SB2022011818 SB2022012640 SB2022012641 and 94 more |
||
| #VU58977 - Deserialization of Untrusted Data CVE-2021-4104 |
CWE-502 | Medium | 7.4.3 Fix Pack 7, 7.5.0 Update Package 3 Interim Fix 02, 7.5.0 Update Pack 7 IF01 | 15.12.2021 |
SB2021121507 SB2021121647 SB2021121720 and 119 more |
||
| #VU27960 - Deserialization of Untrusted Data CVE-2019-17571 |
CWE-502 | High | 7.4.3 Fix Pack 7, 7.5.0 Update Package 3 Interim Fix 02, 7.5.0 Update Pack 7 IF01 | 18.05.2020 |
SB2019122027 SB2020051806 SB2020011497 and 28 more |
||
| #VU27487 - Improper Certificate Validation CVE-2020-9488 |
CWE-295 | Low | 7.5.0 Update Pack 7 IF01 | 04.05.2020 |
SB2020050406 SB2020071606 SB2020071620 and 67 more |
Showing elements 561 - 580 out of 619