Known vulnerabilities in IBM Qradar SIEM - page 53

Vendor: IBM Corporation
Software: IBM Qradar SIEM
Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 1402
Public exploits: 87
Known exploited (KEV): 24
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Qradar SIEM IBM Qradar SIEM is affected by 1402 known vulnerabilities: 8 critical, 140 high, 438 medium, 816 low Critical High Medium Low

Vulnerabilities (1402)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85524 - Exposure of sensitive information to an unauthorized actor
CVE-2023-50950		 CWE-200 Low
No
No
 7.5.0 Update Pack 7 IF04 17.01.2024 SB2024011741
#VU84551 - Improper Certificate Validation
CVE-2018-11087		 CWE-295 Medium
No
No
 - 19.12.2023 SB2023121927
SB2023122602
#VU84531 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-40787		 CWE-89 High
No
No
 7.5.0 Update Pack 7 IF03 18.12.2023 SB2023121850
SB2023121851
SB2023122831
#VU84530 - Improper Access Control
CVE-2023-47146		 CWE-284 Low
No
No
 7.5.0 Update Pack 7 IF03 18.12.2023 SB2023121851
SB2023122831
#VU83960 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-50164		 CWE-22 High
Available
Exploited
 7.5.0 Update Pack 7 IF04 07.12.2023 SB2023120703
SB2023121830
SB2024011029
and 7 more
#VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46589		 CWE-444 Medium
No
No
 7.5.0 Update Pack 7 IF03 28.11.2023 SB2023112846
SB2023121851
SB2023122831
and 78 more
#VU82690 - Deserialization of Untrusted Data
CVE-2023-46604		 CWE-502 Critical
Available
Exploited
 7.5.0 Update Pack 7 IF03 02.11.2023 SB2023110251
SB2023111311
SB2023112410
and 36 more
#VU82560 - Improper Access Control
CVE-2023-34059		 CWE-284 Low
No
No
 7.5.0 Update Pack 7 IF04 30.10.2023 SB2023103026
SB2023103031
SB2023103032
and 32 more
#VU82520 - Improper Authorization
CVE-2023-34058		 CWE-285 Medium
No
No
 7.5.0 Update Pack 7 IF04 27.10.2023 SB2023102702
SB2023103031
SB2023103032
and 33 more
#VU81726 - Integer overflow
CVE-2023-36478		 CWE-190 Medium
No
No
 7.5.0 Update Pack 7 IF03 10.10.2023 SB2023101018
SB2023102640
SB2023103106
and 53 more
#VU80762 - Resource exhaustion
CVE-2023-41835		 CWE-400 Medium
No
No
 7.5.0 Update Pack 7 IF03 13.09.2023 SB2023091364
SB2023110308
SB2023113020
and 7 more
#VU80228 - Cleartext Transmission of Sensitive Information
CVE-2023-40217		 CWE-319 Medium
No
No
 7.5.0 Update Pack 7 IF04 01.09.2023 SB2023090142
SB2023090143
SB2023090144
and 139 more
#VU80089 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-41080		 CWE-601 Medium
Available
No
 7.5.0 Update Pack 7 IF03 29.08.2023 SB2023082924
SB2023100565
SB2023101122
and 51 more
#VU79928 - Deserialization of Untrusted Data
CVE-2023-34040		 CWE-502 Medium
Available
No
 7.5.0 Update Pack 7 IF03 23.08.2023 SB2023082369
SB2023110816
SB2023121130
and 3 more
#VU78413 - Improper input validation
CVE-2023-22045		 CWE-20 Low
No
No
 7.5.0 Update Pack 7 IF03 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 155 more
#VU78414 - Improper input validation
CVE-2023-22049		 CWE-20 Low
No
No
 7.5.0 Update Pack 7 IF03 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 164 more
#VU75217 - Improper input validation
CVE-2023-26049		 CWE-20 Low
No
No
 7.5.0 Update Pack 7, 7.5.0 Update Pack 7 IF03 18.04.2023 SB2023041842
SB2023051821
SB2023060836
and 78 more
#VU70456 - Use After Free
CVE-2022-43552		 CWE-416 Low
No
No
 7.5.0 Update Pack 7 IF05 21.12.2022 SB2022122102
SB2022122620
SB2022122621
and 66 more
#VU69670 - Improper input validation
CVE-2022-3509		 CWE-20 Medium
No
No
 7.5.0 Update Pack 7 IF04 29.11.2022 SB2022111433
SB2022112934
SB2023011787
and 58 more
#VU69293 - Improper input validation
CVE-2022-3171		 CWE-20 Medium
No
No
 7.5.0 Update Pack 7 IF04 14.11.2022 SB2022111433
SB2022111440
SB2022112934
and 105 more


Showing elements 1041 - 1060 out of 1402