Known vulnerabilities in IBM Qradar SIEM - page 48
Vendor:
IBM Corporation
Software:
IBM Qradar SIEM
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
1402
Public exploits:
87
Known exploited (KEV):
24
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
7.5.0 Update Pack 15 IF04
7.5.0 Update Pack 15 IF03
7.5.0 Update Pack 15 IF02
7.5.0 Update Pack 15 IF05
7.5.0 Update Pack 15
7.5.0 Update Pack 15 IF01
7.5.0 Update Pack 10 IF03
7.5.0 Update Pack 14 IF05
7.5.0 Update Pack 14 IF04
7.5.0 Update Pack 14 IF02
7.5.0 Update Pack 14 IF03
7.5.0 Update Pack 14 IF01
7.5.0 Update Pack 14
7.5.0 Update Pack 13 IF02
7.5.0 Update Pack 13 IF01
7.5.0 UP12 IF02
7.5.0 UP12 IF03
7.5.0 Update Pack 13
7.5.0 Update Pack 12 IF01
7.5.0 Update Pack 12
7.5.0 Update Pack 12 IF03
7.5.0 Update Pack 12 IF02
7.5.0 Update Pack 11 IF04
7.5.0 Update Pack 11 IF03
7.5.0 Update Pack 11 IF02
7.5.0 Update Pack 11 IF01
7.5.0 Update Pack 11
7.5.0 UP10 IF02
7.5.0 UP10 IF01
7.5.0 UP10
7.5.0 UP9 IF03
7.5.0 UP9 IF02
7.5.0 UP9 IF01
7.5.0 UP9
7.5.0 UP8 IF03
7.5.0 UP8 IF02
7.5.0 UP8 IF01
7.5.0 UP8
7.5.0 UP7 IF06
7.5.0 Update Pack 7 IF05
7.5.0 Update Pack 7 IF04
7.5.0 Update Pack 7 IF03
7.5.0 Update Pack 7 IF02
7.5.0 Update Pack 7 IF01
7.5.0 Update Pack 7
7.5.0 Update Pack 6
7.5.0 Update Pack 5 IF02
7.5.0 Update Pack 5 IF01
7.5.0 Update Pack 5
7.4.3 Fix Pack 9
7.4.3 Fix Pack 8
7.5.0 Update Pack 4
7.5.0 Update Pack 3 Interim Fix 3
7.4.3 Fix Pack 7 Interim Fix 1
7.5.0 Update Package 3 Interim Fix 02
7.4.3 Fix Pack 7
7.5.0 Update Pack 3
7.5.0 Update Pack 2
7.4.3 Fix Pack 6
7.3.3 Fix Pack 12
7.4.3
7.4.3 Fix Pack 5
7.3.3 Fix Pack 11
7.3
7.3.3 Fix Pack 10 Interim Fix 02
7.3.3 Fix Pack 10 Interim Fix 01
7.4.3 Fix Pack 4 Interim Fix 04
7.4.3 Fix Pack 4 Interim Fix 03
7.4.3 Fix Pack 4 Interim Fix 02
7.4.3 Fix Pack 4 Interim Fix 01
7.5.0 Update Pack 1
7.5.0
7.4.2
7.4.1
7.4.0
7.3.3 Fix Pack 10
7.3.3 Fix Pack 9
7.3.3 Fix Pack 8
7.3.3 Fix Pack 7
7.3.3 Fix Pack 6
7.3.3 Fix Pack 5
7.3.3 Fix Pack 4
7.3.3 Fix Pack 3
7.3.3 Fix Pack 2
7.3.3 Fix Pack 1
7.3.1
7.3.3
7.3.2
7.4.3 Fix Pack 4
7.4.3 Fix Pack 3
7.4.3 Fix Pack 1
7.4.3 Fix Pack 2
7.4
7.3.1 Patch 7
7.3.1 Patch 6
7.3.1 Patch 5
7.2.8 Patch 14
7.2.8 Patch 13
7.3.1 Patch 4
7.3.0 Patch 7
7.3.0 Patch 6
7.3.0 Patch 5
7.3.0 Patch 4
7.3.0 Patch 3
7.3.0 Patch 2
7.3.0 Patch 1
7.2.8 Patch 12
7.3.1 Patch 3
7.2.8 Patch 11
7.2.8 Patch 10
7.2.8 Patch 9
7.2.8 Patch 8
7.2.8 Patch 7
7.2.8 Patch 6
7.2.8 Patch 5
7.2.8 Patch 4
7.2.8 Patch 3
7.2.8 Patch 2
7.2.8 Patch 1
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.3.1 Patch 2
7.3.1 Patch 1
7.3.0
Vulnerabilities (1402)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU88873 - Improper Certificate Validation CVE-2023-50949 |
CWE-295 | Medium | - | 22.04.2024 |
SB2024042218 |
||
| #VU86208 - Use After Free CVE-2021-41043 |
CWE-416 | Medium | 7.5.0 Update Pack 8 IF01 | 07.02.2024 |
SB2022011246 SB2024020724 SB2024021202 and 9 more |
||
| #VU85764 - Improper Authentication CVE-2023-42465 |
CWE-287 | Low | 7.5.0 Update Pack 8 IF01 | 24.01.2024 |
SB2024012432 SB2024012434 SB2024012435 and 32 more |
||
| #VU85623 - Information Exposure Through Timing Discrepancy CVE-2024-0553 |
CWE-208 | Medium | 7.5.0 Update Pack 8 IF01 | 21.01.2024 |
SB2024012105 SB2024012106 SB2024012234 and 78 more |
||
| #VU82140 - Improper input validation CVE-2023-22067 |
CWE-20 | Medium | 7.5.0 Update Pack 8 IF01 | 17.10.2023 |
SB2023101797 SB2023101924 SB2023101990 and 117 more |
||
| #VU82141 - Improper input validation CVE-2023-22081 |
CWE-20 | Medium | 7.5.0 Update Pack 8 IF01 | 17.10.2023 |
SB2023101797 SB2023101798 SB2023101905 and 187 more |
||
| #VU82078 - Use After Free CVE-2022-48560 |
CWE-416 | Medium | 7.5.0 Update Pack 8 IF01 | 17.10.2023 |
SB2023101708 SB2023101712 SB20231017145 and 29 more |
||
| #VU79521 - Improper Link Resolution Before File Access ('Link Following') CVE-2021-35938 |
CWE-59 | Low | 7.5.0 Update Pack 8 IF01 | 15.08.2023 |
SB2023081530 SB2024012452 SB2024012458 and 45 more |
||
| #VU75538 - Exposure of sensitive information to an unauthorized actor CVE-2023-1786 |
CWE-200 | Medium | 7.5.0 Update Pack 8 IF01 | 27.04.2023 |
SB2023042703 SB2023042706 SB2023051101 and 16 more |
||
| #VU74197 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-28487 |
CWE-78 | Low | 7.5.0 Update Pack 8 IF01 | 30.03.2023 |
SB2023033028 SB2023033038 SB2023033039 and 28 more |
||
| #VU74196 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-28486 |
CWE-78 | Low | 7.5.0 Update Pack 8 IF01 | 30.03.2023 |
SB2023033028 SB2023033038 SB2023033039 and 31 more |
||
| #VU74146 - Improper Privilege Management CVE-2023-26604 |
CWE-269 | Low | 7.5.0 Update Pack 8 IF01 | 28.03.2023 |
SB2023032869 SB2023032871 SB2023040540 and 56 more |
||
| #VU71529 - Resource exhaustion CVE-2022-3094 |
CWE-400 | Medium | 7.5.0 Update Pack 8 IF01 | 25.01.2023 |
SB2023012556 SB2023012559 SB2023012602 and 47 more |
||
| #VU48418 - Out-of-bounds read CVE-2020-28241 |
CWE-125 | Medium | 7.5.0 Update Pack 8 IF01 | 06.11.2020 |
SB2020110615 SB2020111401 SB2020111404 and 32 more |
||
| #VU22933 - Buffer over-read CVE-2019-19204 |
CWE-126 | Medium | 7.5.0 Update Pack 8 IF01 | 22.11.2019 |
SB2019111806 SB2020120202 SB2022092145 and 23 more |
||
| #VU22932 - Buffer over-read CVE-2019-19203 |
CWE-126 | Medium | 7.5.0 Update Pack 8 IF01 | 22.11.2019 |
SB2019111806 SB2020120202 SB2022092145 and 22 more |
||
| #VU22814 - Integer overflow CVE-2019-19012 |
CWE-190 | High | 7.5.0 Update Pack 8 IF01 | 18.11.2019 |
SB2019111806 SB2023021411 SB2024012468 and 19 more |
||
| #VU30789 - Resource exhaustion CVE-2019-16163 |
CWE-400 | Medium | 7.5.0 Update Pack 8 IF01 | 09.09.2019 |
SB2019090921 SB2022092145 SB2022110232 and 24 more |
||
| #VU20904 - Use After Free CVE-2019-13224 |
CWE-416 | High | 7.5.0 Update Pack 8 IF01 | 06.09.2019 |
SB2019090602 SB2019092002 SB2019100314 and 26 more |
||
| #VU18263 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2012-6708 |
CWE-79 | Medium | 7.5.0 Update Pack 8 IF01 | 15.04.2019 |
SB2012072101 SB2019100301 SB2020033103 and 15 more |
Showing elements 941 - 960 out of 1402