Known vulnerabilities in IBM Qradar SIEM 7.5.0 Update Pack 6 - page 32

Vendor: IBM Corporation
Software: IBM Qradar SIEM
Version: 7.5.0 Update Pack 6
Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 630
Public exploits: 36
Known exploited (KEV): 13

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Qradar SIEM version 7.5.0 Update Pack 6 IBM Qradar SIEM 7.5.0 Update Pack 6 is affected by 630 vulnerabilities: 5 critical, 63 high, 231 medium, 331 low Critical High Medium Low

Vulnerabilities (630)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81888 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-40367		 CWE-79 Medium
No
No
 7.5.0 Update Pack 7 11.10.2023 SB2023101151
#VU78901 - Deserialization of Untrusted Data
CVE-2022-40609		 CWE-502 High
No
No
 7.5.0 Update Pack 7 03.08.2023 SB2023080307
SB2023080808
SB2023080809
and 56 more
#VU77362 - Resource exhaustion
CVE-2023-34455		 CWE-400 Medium
No
No
 7.5.0 Update Pack 7 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 48 more
#VU77361 - Integer overflow
CVE-2023-34454		 CWE-190 Medium
No
No
 7.5.0 Update Pack 7 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 39 more
#VU77359 - Integer overflow
CVE-2023-34453		 CWE-190 Medium
No
No
 7.5.0 Update Pack 7 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 40 more
#VU77208 - Improper Authentication
CVE-2023-20867		 CWE-287 High
No
Exploited
 7.5.0 Update Pack 7 13.06.2023 SB2023061339
SB2023061449
SB2023061649
and 34 more
#VU76601 - Deserialization of Untrusted Data
CVE-2016-1000027		 CWE-502 High
No
No
 7.5.0 Update Pack 7 29.05.2023 SB2023052915
SB2023060816
SB2023062703
and 24 more
#VU76417 - Allocation of Resources Without Limits or Throttling
CVE-2023-28709		 CWE-770 Medium
No
No
 7.5.0 Update Pack 7 22.05.2023 SB2023052235
SB2023053003
SB2023053052
and 35 more
#VU75508 - Exposure of sensitive information to an unauthorized actor
CVE-2023-30441		 CWE-200 Medium
No
No
 7.5.0 Update Pack 7 26.04.2023 SB2023042618
SB2023042749
SB2023050107
and 41 more
#VU72575 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48339		 CWE-78 High
No
No
 7.5.0 Update Pack 7 26.02.2023 SB2022120142
SB2023022605
SB2023030230
and 50 more


Showing elements 621 - 640 out of 630