Known vulnerabilities in IBM Qradar SIEM - page 51

Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Total vulnerabilities: 1402
Public exploits: 87
Known exploited (KEV): 24
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Qradar SIEM IBM Qradar SIEM is affected by 1402 known vulnerabilities: 8 critical, 140 high, 438 medium, 816 low Critical High Medium Low

Vulnerabilities (1402)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87855 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-50960
CWE-79 Low
No
No
7.5.0 Update Pack 8 27.03.2024 SB2024032725
SB2024062139
#VU87854 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-50961
CWE-78 Medium
No
No
7.5.0 Update Pack 8 27.03.2024 SB2024032725
SB2024062139
#VU87853 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-28784
CWE-79 Medium
No
No
7.5.0 Update Pack 8 27.03.2024 SB2024032725
SB2024062139
#VU85468 - Improper input validation
CVE-2024-20918
CWE-20 Medium
No
No
7.5.0 Update Pack 7 IF06 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 192 more
#VU85470 - Improper input validation
CVE-2024-20919
CWE-20 Medium
No
No
7.5.0 Update Pack 7 IF06 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU84985 - Out-of-bounds read
CVE-2023-7104
CWE-125 Medium
No
No
7.5.0 Update Pack 8 04.01.2024 SB2024010417
SB2024010420
SB2024010516
and 108 more
#VU82980 - Improper input validation
CVE-2023-27043
CWE-20 Medium
No
No
7.5.0 Update Pack 8 10.11.2023 SB2023041957
SB2023111064
SB2023111315
and 120 more
#VU78463 - Resource Management Errors
CVE-2023-3446
CWE-399 Medium
No
No
7.5.0 Update Pack 8 20.07.2023 SB2023072079
SB2023072524
SB2023072525
and 152 more
#VU72448 - Improper Access Control
CVE-2022-21216
CWE-284 Low
No
No
- 21.02.2023 SB2023022131
SB2023022140
SB2023022141
and 21 more
#VU72036 - Error Handling
CVE-2023-23931
CWE-388 Low
No
No
7.5.0 Update Pack 8 08.02.2023 SB2023020813
SB2023030952
SB2023031419
and 68 more
#VU68829 - Resource Management Errors
CVE-2022-40304
CWE-399 Medium
No
No
7.5.0 Update Pack 8 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 90 more
#VU68828 - Integer overflow
CVE-2022-40303
CWE-190 High
No
No
7.5.0 Update Pack 8 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 88 more
#VU67760 - Type conversion
CVE-2020-10735
CWE-704 Medium
No
No
7.5.0 Update Pack 8 29.09.2022 SB2022092968
SB2022092970
SB2022093032
and 86 more
#VU64152 - Deserialization of Untrusted Data
CVE-2022-25647
CWE-502 Medium
No
No
7.4.3 Fix Pack 9, 7.5.0 Update Pack 5, 7.5.0 Update Pack 8 10.06.2022 SB2021120221
SB2022061003
SB2022061421
and 94 more
#VU64078 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-26377
CWE-444 Medium
Available
No
7.5.0 Update Pack 8 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 39 more
#VU51777 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-28957
CWE-79 Low
No
No
7.5.0 Update Pack 8 30.03.2021 SB2021033001
SB2021033005
SB2021040175
and 20 more
#VU50430 - Incorrect Regular Expression
CVE-2020-28493
CWE-185 Medium
No
No
7.5.0 Update Pack 8 01.02.2021 SB2021020905
SB2021020908
SB2021020909
and 21 more
#VU48793 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-27783
CWE-79 Medium
No
No
7.5.0 Update Pack 8 03.12.2020 SB2020120602
SB2020120603
SB2020121305
and 20 more
#VU28238 - Exposed Dangerous Method or Function
CVE-2020-10683
CWE-749 Medium
No
No
7.5.0 Update Pack 8 26.05.2020 SB2020050106
SB2020052616
SB2020071632
and 43 more
#VU14515 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-1000632
CWE-611 Low
No
No
7.5.0 Update Pack 8 21.08.2018 SB2018082321
SB2018120722
SB2018121006
and 20 more


Showing elements 1001 - 1020 out of 1402