Known vulnerabilities in IBM Qradar SIEM - page 11

Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Total vulnerabilities: 1402
Public exploits: 87
Known exploited (KEV): 24
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Qradar SIEM IBM Qradar SIEM is affected by 1402 known vulnerabilities: 8 critical, 140 high, 438 medium, 816 low Critical High Medium Low

Vulnerabilities (1402)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113671 - Resource exhaustion
CVE-2011-5034
CWE-400 Medium
No
No
7.5.0 Update Pack 13 06.08.2025 SB2011123005
SB2025080618
#VU113618 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-33118
CWE-79 Low
No
No
7.5.0 Update Pack 13 05.08.2025 SB2025080618
#VU113040 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-33097
CWE-79 Low
No
No
7.5.0 Update Pack 12 IF03 18.07.2025 SB2025071820
SB2025080836
#VU112440 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2025-3576
CWE-327 Medium
No
No
7.5.0 Update Pack 13 07.07.2025 SB2025070764
SB2025070769
SB2025070770
and 29 more
#VU112146 - Server-Side Request Forgery (SSRF)
CVE-2025-27817
CWE-918 High
Available
No
7.5.0 Update Pack 13 03.07.2025 SB2025070339
SB2025070340
SB2025070345
and 42 more
#VU111165 - Improper Access Control
CVE-2025-48734
CWE-284 Medium
No
No
7.5.0 Update Pack 12 IF03 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU104950 - Use After Free
CVE-2025-21764
CWE-416 Low
No
No
7.5.0 Update Pack 13 27.02.2025 SB2025022748
SB2025040917
SB2025040929
and 68 more
#VU104044 - Resource exhaustion
CVE-2024-12243
CWE-400 Medium
No
No
7.5.0 Update Pack 13 18.02.2025 SB2025021831
SB2025021832
SB2025021835
and 65 more
#VU100780 - Exposure of sensitive information to an unauthorized actor
CVE-2024-31141
CWE-200 Medium
No
No
7.5.0 Update Pack 13 21.11.2024 SB2024112150
SB2024120226
SB2024120331
and 34 more
#VU100714 - NULL Pointer Dereference
CVE-2024-53064
CWE-476 Low
No
No
7.5.0 Update Pack 13 20.11.2024 SB2024112041
SB20250115100
SB2025011731
and 24 more
#VU100622 - Out-of-bounds read
CVE-2024-50301
CWE-125 Low
No
No
7.5.0 Update Pack 13 19.11.2024 SB2024111933
SB2024112401
SB2024112933
and 69 more
#VU98025 - Resource exhaustion
CVE-2024-47554
CWE-400 Medium
No
No
7.5.0 Update Pack 13 03.10.2024 SB2024100352
SB2024100421
SB2024101007
and 132 more
#VU96413 - Use After Free
CVE-2022-48919
CWE-416 Low
No
No
7.5.0 Update Pack 13 22.08.2024 SB2024082217
SB2024091076
SB2024091077
and 18 more
#VU93357 - Cryptographic Issues
CVE-2011-4461
CWE-310 Low
No
No
7.5.0 Update Pack 13 26.06.2024 SB2021022238
SB2025080618
#VU86625 - Resource exhaustion
CVE-2024-26308
CWE-400 Medium
No
No
7.5.0 Update Pack 13 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 138 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710
CWE-835 Medium
No
No
7.5.0 Update Pack 13 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 102 more
#VU81168 - Out-of-bounds read
CVE-2023-40403
CWE-125 Low
No
No
7.5.0 Update Pack 13 26.09.2023 SB2023092664
SB2023092707
SB2023092143
and 22 more
#VU80828 - Allocation of Resources Without Limits or Throttling
CVE-2023-33953
CWE-770 Medium
No
No
7.5.0 Update Pack 12 IF03 15.09.2023 SB2023091533
SB2023110913
SB2024022138
and 9 more
#VU79796 - Improper input validation
CVE-2023-32732
CWE-20 Medium
No
No
7.5.0 Update Pack 12 IF03 21.08.2023 SB2023082198
SB20230821106
SB20230821107
and 16 more
#VU68606 - Improper Verification of Cryptographic Signature
CVE-2020-16156
CWE-347 High
No
No
7.5.0 Update Pack 12 IF03 24.10.2022 SB2021121359
SB2022102433
SB2022102701
and 12 more


Showing elements 201 - 220 out of 1402