Known vulnerabilities in IBM Qradar SIEM 7.5.0 Update Pack 7 - page 27

Vendor: IBM Corporation
Software: IBM Qradar SIEM
Version: 7.5.0 Update Pack 7
Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 573
Public exploits: 33
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Qradar SIEM version 7.5.0 Update Pack 7 IBM Qradar SIEM 7.5.0 Update Pack 7 is affected by 573 vulnerabilities: 5 critical, 55 high, 196 medium, 317 low Critical High Medium Low

Vulnerabilities (573)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87855 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-50960		 CWE-79 Low
No
No
 7.5.0 Update Pack 8 27.03.2024 SB2024032725
SB2024062139
#VU87854 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-50961		 CWE-78 Medium
No
No
 7.5.0 Update Pack 8 27.03.2024 SB2024032725
SB2024062139
#VU87853 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-28784		 CWE-79 Medium
No
No
 7.5.0 Update Pack 8 27.03.2024 SB2024032725
SB2024062139
#VU85468 - Improper input validation
CVE-2024-20918		 CWE-20 Medium
No
No
 7.5.0 Update Pack 7 IF06 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 192 more
#VU85469 - Improper input validation
CVE-2024-20952		 CWE-20 Medium
No
No
 7.5.0 Update Pack 7 IF06 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 189 more
#VU85470 - Improper input validation
CVE-2024-20919		 CWE-20 Medium
No
No
 7.5.0 Update Pack 7 IF06 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85471 - Improper input validation
CVE-2024-20921		 CWE-20 Medium
No
No
 7.5.0 Update Pack 7 IF06 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 185 more
#VU85472 - Improper input validation
CVE-2024-20926		 CWE-20 Medium
No
No
 7.5.0 Update Pack 7 IF06 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85473 - Improper input validation
CVE-2024-20945		 CWE-20 Low
No
No
 7.5.0 Update Pack 7 IF06 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 177 more
#VU84531 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-40787		 CWE-89 High
No
No
 7.5.0 Update Pack 7 IF03 18.12.2023 SB2023121850
SB2023121851
SB2023122831
#VU83545 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2022-46337		 CWE-90 High
No
No
 7.5.0 Update Pack 7 IF06 28.11.2023 SB2023112861
SB2024011806
SB2024020107
and 34 more
#VU82980 - Improper input validation
CVE-2023-27043		 CWE-20 Medium
No
No
 7.5.0 Update Pack 8 10.11.2023 SB2023041957
SB2023111064
SB2023111315
and 120 more
#VU82583 - Observable discrepancy
CVE-2023-33850		 CWE-203 Medium
No
No
 7.5.0 Update Pack 7 IF06 31.10.2023 SB2023103131
SB2023111305
SB2023111407
and 106 more
#VU80089 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-41080		 CWE-601 Medium
Public exploit available
No
 7.5.0 Update Pack 7 IF03 29.08.2023 SB2023082924
SB2023100565
SB2023101122
and 51 more
#VU78413 - Improper input validation
CVE-2023-22045		 CWE-20 Low
No
No
 7.5.0 Update Pack 7 IF03 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 155 more
#VU69670 - Improper input validation
CVE-2022-3509		 CWE-20 Medium
No
No
 7.5.0 Update Pack 7 IF04 29.11.2022 SB2022111433
SB2022112934
SB2023011787
and 58 more
#VU69293 - Improper input validation
CVE-2022-3171		 CWE-20 Medium
No
No
 7.5.0 Update Pack 7 IF04 14.11.2022 SB2022111433
SB2022111440
SB2022112934
and 105 more
#VU65495 - Improper input validation
CVE-2022-34169		 CWE-20 High
Public exploit available
No
 7.5.0 Update Pack 7 IF06 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 137 more
#VU64152 - Deserialization of Untrusted Data
CVE-2022-25647		 CWE-502 Medium
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5, 7.5.0 Update Pack 8 10.06.2022 SB2021120221
SB2022061003
SB2022061421
and 94 more
#VU50430 - Incorrect Regular Expression
CVE-2020-28493		 CWE-185 Medium
No
No
 7.5.0 Update Pack 8 01.02.2021 SB2021020905
SB2021020908
SB2021020909
and 21 more


Showing elements 521 - 540 out of 573