Known vulnerabilities in IBM Qradar SIEM 7.5.0 Update Pack 5 - page 31

Vendor: IBM Corporation
Software: IBM Qradar SIEM
Version: 7.5.0 Update Pack 5
Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 619
Public exploits: 37
Known exploited (KEV): 13
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Qradar SIEM version 7.5.0 Update Pack 5 IBM Qradar SIEM 7.5.0 Update Pack 5 is affected by 619 vulnerabilities: 5 critical, 66 high, 222 medium, 326 low Critical High Medium Low

Vulnerabilities (619)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81888 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-40367		 CWE-79 Medium
No
No
 7.5.0 Update Pack 7 11.10.2023 SB2023101151
#VU78901 - Deserialization of Untrusted Data
CVE-2022-40609		 CWE-502 High
No
No
 7.5.0 Update Pack 7 03.08.2023 SB2023080307
SB2023080808
SB2023080809
and 56 more
#VU77649 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-26274		 CWE-79 Medium
No
No
 7.5.0 Update Pack 6 22.06.2023 SB2023062275
#VU77648 - Improper Access Control
CVE-2023-26273		 CWE-284 Low
No
No
 7.5.0 Update Pack 6 22.06.2023 SB2023062275
#VU77647 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-26276		 CWE-327 Low
No
No
 7.5.0 Update Pack 6 22.06.2023 SB2023062275
#VU77646 - Authorization Bypass Through User-Controlled Key
CVE-2022-34352		 CWE-639 Low
No
No
 7.5.0 Update Pack 6, 7.5.0 Update Pack 7 IF01 22.06.2023 SB2023062275
SB2023103068
#VU77362 - Resource exhaustion
CVE-2023-34455		 CWE-400 Medium
No
No
 7.5.0 Update Pack 7 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 48 more
#VU77361 - Integer overflow
CVE-2023-34454		 CWE-190 Medium
No
No
 7.5.0 Update Pack 7 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 39 more
#VU77359 - Integer overflow
CVE-2023-34453		 CWE-190 Medium
No
No
 7.5.0 Update Pack 7 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 40 more
#VU76601 - Deserialization of Untrusted Data
CVE-2016-1000027		 CWE-502 High
No
No
 7.5.0 Update Pack 7 29.05.2023 SB2023052915
SB2023060816
SB2023062703
and 24 more
#VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-25690		 CWE-113 Medium
Public exploit available
No
 7.5.0 Update Pack 5 IF02 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 54 more
#VU72575 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48339		 CWE-78 High
No
No
 7.5.0 Update Pack 7 26.02.2023 SB2022120142
SB2023022605
SB2023030230
and 50 more
#VU69467 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-39135		 CWE-611 High
No
No
 7.5.0 Update Pack 6 21.11.2022 SB2022112141
SB2022112142
SB2023040701
and 4 more
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 7.5.0 Update Pack 6 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU49379 - Deserialization of Untrusted Data
CVE-2020-35490		 CWE-502 High
No
No
 7.5.0 Update Pack 6 17.12.2020 SB2021011105
SB2021042826
SB2021050708
and 16 more
#VU49380 - Deserialization of Untrusted Data
CVE-2020-35491		 CWE-502 High
No
No
 7.5.0 Update Pack 6 17.12.2020 SB2021011105
SB2021042826
SB2021050708
and 15 more
#VU47648 - Improper Certificate Validation
CVE-2020-13955		 CWE-295 Medium
No
No
 7.5.0 Update Pack 6 09.10.2020 SB2020101501
SB2023062274
SB2025090824
#VU27956 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2020-11971		 CWE-350 Medium
No
No
 7.5.0 Update Pack 6 17.05.2020 SB2020051702
SB2022042254
SB2022100521
and 5 more
#VU11268 - Deserialization of Untrusted Data
CVE-2018-7489		 CWE-502 High
No
No
 7.5.0 Update Pack 6 26.03.2018 SB2018021604
SB2018041910
SB2018050306
and 28 more


Showing elements 601 - 620 out of 619