Known vulnerabilities in IBM Qradar SIEM - page 10

Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Total vulnerabilities: 1402
Public exploits: 87
Known exploited (KEV): 24
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Qradar SIEM IBM Qradar SIEM is affected by 1402 known vulnerabilities: 8 critical, 140 high, 438 medium, 816 low Critical High Medium Low

Vulnerabilities (1402)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114428 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-36042
CWE-79 Medium
No
No
7.5.0 Update Pack 13 IF01 26.08.2025 SB2025082608
#VU114427 - Execution with Unnecessary Privileges
CVE-2025-33120
CWE-250 Medium
No
No
7.5.0 Update Pack 13 IF01 26.08.2025 SB2025082608
#VU112276 - Resource exhaustion
CVE-2025-53506
CWE-400 Medium
No
No
7.5.0 Update Pack 13 IF01 04.07.2025 SB20250704167
SB2025072535
SB2025072536
and 41 more
#VU112274 - Improper input validation
CVE-2025-52434
CWE-20 Medium
No
No
7.5.0 Update Pack 13 IF01 04.07.2025 SB20250704167
SB2025072535
SB2025072536
and 32 more
#VU112255 - Deserialization of Untrusted Data
CVE-2025-27818
CWE-502 Medium
No
No
7.5.0 Update Pack 13 04.07.2025 SB20250704102
SB2025070708
SB2025080519
and 16 more
#VU112067 - Protection Mechanism Failure
CVE-2025-32462
CWE-693 Low
Available
No
7.5.0 Update Pack 13 01.07.2025 SB2025070109
SB2025070111
SB2025070112
and 42 more
#VU111970 - Expected Behavior Violation
CVE-2025-4435
CWE-440 Low
No
No
7.5.0 Update Pack 13 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 59 more
#VU111969 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12718
CWE-22 Medium
No
No
7.5.0 Update Pack 13 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 62 more
#VU111968 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-4138
CWE-59 High
Available
No
7.5.0 Update Pack 13 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 64 more
#VU111967 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-4330
CWE-59 High
No
No
7.5.0 Update Pack 13 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 63 more
#VU111966 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-4517
CWE-22 High
Available
No
7.5.0 Update Pack 13 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 77 more
#VU111913 - Integer overflow
CVE-2024-23337
CWE-190 Medium
No
No
7.5.0 Update Pack 13 IF01 25.06.2025 SB2025032035
SB2025070824
SB2025070826
and 29 more
#VU111389 - Improper Access Control
CVE-2025-6020
CWE-284 Low
No
No
7.5.0 Update Pack 13 19.06.2025 SB2025061987
SB2025061992
SB20250619103
and 69 more
#VU109844 - Untrusted Search Path
CVE-2025-4802
CWE-426 Low
No
No
7.5.0 Update Pack 13 27.05.2025 SB2025052725
SB2025052735
SB2025052910
and 36 more
#VU109425 - Exposure of sensitive information to an unauthorized actor
CVE-2024-45332
CWE-200 Low
No
No
7.5.0 Update Pack 13 IF01 19.05.2025 SB2025051947
SB2025051953
SB2025051954
and 12 more
#VU109424 - Exposure of sensitive information to an unauthorized actor
CVE-2025-20623
CWE-200 Low
No
No
7.5.0 Update Pack 13 IF01 19.05.2025 SB2025051947
SB2025051953
SB2025051954
and 10 more
#VU109171 - Incorrect Behavior Order
CVE-2025-20012
CWE-696 Low
No
No
7.5.0 Update Pack 13 IF01 14.05.2025 SB2025051436
SB2025051953
SB2025051954
and 14 more
#VU109169 - Missing initialization of resource
CVE-2025-24495
CWE-909 Low
No
No
7.5.0 Update Pack 13 IF01 14.05.2025 SB2025051436
SB2025051953
SB2025051954
and 13 more
#VU103980 - Resource exhaustion
CVE-2024-12133
CWE-400 Medium
No
No
7.5.0 Update Pack 13 14.02.2025 SB2025021428
SB2025021429
SB2025021430
and 78 more
#VU97689 -
CVE-2024-6531
Medium
No
No
7.5.0 Update Pack 13 IF01 25.09.2024 SB2024092513
SB2024121139
SB2025031910
and 7 more


Showing elements 181 - 200 out of 1402