Known vulnerabilities in IBM Qradar SIEM 7.5.0 UP9 IF01 - page 13

Vendor: IBM Corporation

Software: IBM Qradar SIEM

Version: 7.5.0 UP9 IF01

Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 389

Public exploits: 22

Known exploited (KEV): 10

Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Vulnerabilities (389)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU109211 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-56463	CWE-79	Low	No	No	7.5.0 Update Pack 11 IF01	15.05.2025	SB2025051552 SB2025051554
#VU105715 - Out-of-bounds write CVE-2025-27363	CWE-787	Critical	Public exploit available	Exploited	7.5.0 Update Pack 11 IF04	14.03.2025	SB2025031402 SB2025031502 SB2025031750 and 97 more
#VU105485 - Improper input validation CVE-2025-24813	CWE-20	Critical	Public exploit available	Exploited	7.5.0 Update Pack 11 IF04	10.03.2025	SB2025031069 SB2025031976 SB2025032642 and 48 more
#VU105387 - Improper input validation CVE-2025-27516	CWE-20	Low	No	No	7.5.0 Update Pack 11 IF04	06.03.2025	SB2025030628 SB2025031001 SB2025031002 and 83 more
#VU104982 - Out-of-bounds read CVE-2025-21785	CWE-125	Low	No	No	7.5.0 Update Pack 11 IF04	27.02.2025	SB2025022780 SB2025032503 SB2025032504 and 65 more
#VU104972 - Use After Free CVE-2024-57979	CWE-416	Low	No	No	7.5.0 Update Pack 11 IF04	27.02.2025	SB2025022770 SB2025031049 SB2025031050 and 55 more
#VU104117 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-1244	CWE-78	High	No	No	7.5.0 Update Pack 11 IF03	21.02.2025	SB2025022110 SB2025022111 SB2025022112 and 31 more
#VU104099 - Use After Free CVE-2024-56171	CWE-416	High	No	No	7.5.0 Update Pack 11 IF04	20.02.2025	SB2025022003 SB2025022010 SB2025022023 and 111 more
#VU104098 - Stack-based buffer overflow CVE-2025-24928	CWE-121	High	No	No	7.5.0 Update Pack 11 IF04	20.02.2025	SB2025022003 SB2025022010 SB2025022023 and 111 more
#VU104080 - Out-of-bounds write CVE-2025-0624	CWE-787	Low	No	No	7.5.0 Update Pack 11 IF04	19.02.2025	SB202502197147 SB202502197181 SB202502197183 and 43 more
#VU103970 - Improper input validation CVE-2025-1094	CWE-20	Critical	Public exploit available	Exploited	7.5.0 Update Pack 11 IF03	14.02.2025	SB2025021408 SB2025022038 SB2025022039 and 78 more
#VU103500 - Permissions, Privileges, and Access Controls CVE-2024-11218	CWE-264	Medium	No	No	7.5.0 Update Pack 11 IF04	03.02.2025	SB2025020321 SB2025020332 SB2025020333 and 34 more
#VU103436 - Resource exhaustion CVE-2024-11187	CWE-400	Medium	No	No	7.5.0 Update Pack 11 IF03	29.01.2025	SB2025012962 SB2025012964 SB2025012965 and 83 more
#VU102938 - Improper Locking CVE-2024-57807	CWE-667	Low	No	No	7.5.0 Update Pack 11 IF04	17.01.2025	SB2025011799 SB20250228103 SB20250228104 and 46 more
#VU102090 - Out-of-bounds write CVE-2024-53197	CWE-787	High	No	Exploited	7.5.0 Update Pack 11 IF04	30.12.2024	SB20241230114 SB2025011046 SB2025011047 and 83 more
#VU101102 - Out-of-bounds write CVE-2024-53104	CWE-787	High	No	Exploited	7.5.0 Update Pack 11 IF03	03.12.2024	SB2024120308 SB2024121358 SB2024121359 and 128 more
#VU101033 - Use After Free CVE-2023-52922	CWE-416	Low	No	No	7.5.0 Update Pack 11 IF04	28.11.2024	SB2024112876 SB2024121502 SB2024121504 and 40 more
#VU100611 - Missing release of memory after effective lifetime CVE-2024-50302	CWE-401	Medium	No	Exploited	7.5.0 Update Pack 11 IF04	19.11.2024	SB2024111922 SB2024112401 SB2024121358 and 128 more
#VU94202 - Missing release of memory after effective lifetime CVE-2024-40906	CWE-401	Low	No	No	7.5.0 Update Pack 12 IF02	13.07.2024	SB2024071302 SB2024071701 SB2024080967 and 19 more
#VU9687 - Memory corruption CVE-2017-9047	CWE-119	Low	No	No	7.5.0 Update Pack 11 IF04	19.12.2017	SB2017121308 SB2017111019 SB2022110928 and 29 more

Showing elements 241 - 260 out of 389

Known vulnerabilities in IBM Qradar SIEM 7.5.0 UP9 IF01 - page 13

Vulnerabilities by Severity

Vulnerabilities (389)

Please verify you're human