Known vulnerabilities in IBM Qradar SIEM - page 54
Vendor:
IBM Corporation
Software:
IBM Qradar SIEM
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
1402
Public exploits:
87
Known exploited (KEV):
24
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
7.5.0 Update Pack 15 IF04
7.5.0 Update Pack 15 IF03
7.5.0 Update Pack 15 IF02
7.5.0 Update Pack 15 IF05
7.5.0 Update Pack 15
7.5.0 Update Pack 15 IF01
7.5.0 Update Pack 10 IF03
7.5.0 Update Pack 14 IF05
7.5.0 Update Pack 14 IF04
7.5.0 Update Pack 14 IF02
7.5.0 Update Pack 14 IF03
7.5.0 Update Pack 14 IF01
7.5.0 Update Pack 14
7.5.0 Update Pack 13 IF02
7.5.0 Update Pack 13 IF01
7.5.0 UP12 IF02
7.5.0 UP12 IF03
7.5.0 Update Pack 13
7.5.0 Update Pack 12 IF01
7.5.0 Update Pack 12
7.5.0 Update Pack 12 IF03
7.5.0 Update Pack 12 IF02
7.5.0 Update Pack 11 IF04
7.5.0 Update Pack 11 IF03
7.5.0 Update Pack 11 IF02
7.5.0 Update Pack 11 IF01
7.5.0 Update Pack 11
7.5.0 UP10 IF02
7.5.0 UP10 IF01
7.5.0 UP10
7.5.0 UP9 IF03
7.5.0 UP9 IF02
7.5.0 UP9 IF01
7.5.0 UP9
7.5.0 UP8 IF03
7.5.0 UP8 IF02
7.5.0 UP8 IF01
7.5.0 UP8
7.5.0 UP7 IF06
7.5.0 Update Pack 7 IF05
7.5.0 Update Pack 7 IF04
7.5.0 Update Pack 7 IF03
7.5.0 Update Pack 7 IF02
7.5.0 Update Pack 7 IF01
7.5.0 Update Pack 7
7.5.0 Update Pack 6
7.5.0 Update Pack 5 IF02
7.5.0 Update Pack 5 IF01
7.5.0 Update Pack 5
7.4.3 Fix Pack 9
7.4.3 Fix Pack 8
7.5.0 Update Pack 4
7.5.0 Update Pack 3 Interim Fix 3
7.4.3 Fix Pack 7 Interim Fix 1
7.5.0 Update Package 3 Interim Fix 02
7.4.3 Fix Pack 7
7.5.0 Update Pack 3
7.5.0 Update Pack 2
7.4.3 Fix Pack 6
7.3.3 Fix Pack 12
7.4.3
7.4.3 Fix Pack 5
7.3.3 Fix Pack 11
7.3
7.3.3 Fix Pack 10 Interim Fix 02
7.3.3 Fix Pack 10 Interim Fix 01
7.4.3 Fix Pack 4 Interim Fix 04
7.4.3 Fix Pack 4 Interim Fix 03
7.4.3 Fix Pack 4 Interim Fix 02
7.4.3 Fix Pack 4 Interim Fix 01
7.5.0 Update Pack 1
7.5.0
7.4.2
7.4.1
7.4.0
7.3.3 Fix Pack 10
7.3.3 Fix Pack 9
7.3.3 Fix Pack 8
7.3.3 Fix Pack 7
7.3.3 Fix Pack 6
7.3.3 Fix Pack 5
7.3.3 Fix Pack 4
7.3.3 Fix Pack 3
7.3.3 Fix Pack 2
7.3.3 Fix Pack 1
7.3.1
7.3.3
7.3.2
7.4.3 Fix Pack 4
7.4.3 Fix Pack 3
7.4.3 Fix Pack 1
7.4.3 Fix Pack 2
7.4
7.3.1 Patch 7
7.3.1 Patch 6
7.3.1 Patch 5
7.2.8 Patch 14
7.2.8 Patch 13
7.3.1 Patch 4
7.3.0 Patch 7
7.3.0 Patch 6
7.3.0 Patch 5
7.3.0 Patch 4
7.3.0 Patch 3
7.3.0 Patch 2
7.3.0 Patch 1
7.2.8 Patch 12
7.3.1 Patch 3
7.2.8 Patch 11
7.2.8 Patch 10
7.2.8 Patch 9
7.2.8 Patch 8
7.2.8 Patch 7
7.2.8 Patch 6
7.2.8 Patch 5
7.2.8 Patch 4
7.2.8 Patch 3
7.2.8 Patch 2
7.2.8 Patch 1
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.3.1 Patch 2
7.3.1 Patch 1
7.3.0
Vulnerabilities (1402)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU82994 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-43057 |
CWE-79 | Low | 7.5.0 Update Pack 7 IF02 | 10.11.2023 |
SB2023111090 SB2023111604 |
||
| #VU81800 - Resource Management Errors CVE-2023-42795 |
CWE-399 | Medium | 7.5.0 Update Pack 7 IF03 | 10.10.2023 |
SB2023101084 SB2023101122 SB2023101123 and 47 more |
||
| #VU81799 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-45648 |
CWE-444 | Medium | 7.5.0 Update Pack 7 IF03 | 10.10.2023 |
SB2023101084 SB2023101122 SB2023101123 and 47 more |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 7.5.0 Update Pack 7 IF03 | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 650 more |
||
| #VU80931 - Resource exhaustion CVE-2023-3341 |
CWE-400 | Medium | 7.5.0 Update Pack 7 IF02 | 20.09.2023 |
SB2023092048 SB2023092050 SB2023092148 and 90 more |
||
| #VU80792 - Improper input validation CVE-2023-36479 |
CWE-20 | Medium | 7.5.0 Update Pack 7 IF03 | 14.09.2023 |
SB2023091440 SB2023092933 SB2023102621 and 48 more |
||
| #VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-40167 |
CWE-444 | Medium | 7.5.0 Update Pack 7 IF03 | 14.09.2023 |
SB2023091440 SB2023092933 SB2023101760 and 68 more |
||
| #VU80523 - Out-of-bounds write CVE-2020-22218 |
CWE-787 | Medium | 7.5.0 Update Pack 7 IF02 | 07.09.2023 |
SB2023090729 SB2023090732 SB2023090843 and 21 more |
||
| #VU80188 - Cryptographic Issues CVE-2023-20900 |
CWE-310 | Medium | 7.5.0 Update Pack 7 IF02 | 31.08.2023 |
SB2023083119 SB2023083154 SB2023083155 and 38 more |
||
| #VU80019 - Server-Side Request Forgery (SSRF) CVE-2022-44730 |
CWE-918 | Medium | 7.5.0 Update Pack 7 IF02 | 25.08.2023 |
SB2023082528 SB2023100208 SB2023100306 and 15 more |
||
| #VU80018 - Server-Side Request Forgery (SSRF) CVE-2022-44729 |
CWE-918 | Medium | 7.5.0 Update Pack 7 IF02 | 25.08.2023 |
SB2023082528 SB2023100208 SB2023100306 and 25 more |
||
| #VU79878 - Incorrect Authorization CVE-2023-3899 |
CWE-863 | Low | 7.5.0 Update Pack 7 IF02 | 23.08.2023 |
SB2023082308 SB2023082309 SB2023082310 and 44 more |
||
| #VU78572 - Use After Free CVE-2023-20593 |
CWE-416 | Low | 7.5.0 Update Pack 7 IF02 | 24.07.2023 |
SB2023072428 SB2023072429 SB2023072553 and 134 more |
||
| #VU78326 - Out-of-bounds write CVE-2023-35001 |
CWE-787 | Low | 7.5.0 Update Pack 7 IF03 | 17.07.2023 |
SB2023071735 SB2023071736 SB2023072077 and 129 more |
||
| #VU77502 - Out-of-bounds write CVE-2023-35788 |
CWE-787 | Low | 7.5.0 Update Pack 7 IF02 | 19.06.2023 |
SB2023061905 SB2023062942 SB2023062969 and 103 more |
||
| #VU75807 - Use After Free CVE-2023-32233 |
CWE-416 | Low | 7.5.0 Update Pack 7 IF03 | 09.05.2023 |
SB2023050923 SB2023051402 SB2023053054 and 100 more |
||
| #VU72618 - Improper input validation CVE-2023-24329 |
CWE-20 | Medium | 7.5.0 Update Pack 6, 7.5.0 Update Pack 7 IF01 | 28.02.2023 |
SB2023022819 SB2023022822 SB2023030832 and 158 more |
||
| #VU59693 - Deserialization of Untrusted Data CVE-2020-9493 |
CWE-502 | High | 7.5.0 Update Pack 7 IF01 | 18.01.2022 |
SB2021061626 SB2022011819 SB2022012640 and 62 more |
||
| #VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2022-23305 |
CWE-89 | Medium | 7.5.0 Update Pack 7 IF01 | 18.01.2022 |
SB2022011818 SB2022012640 SB2022012641 and 94 more |
||
| #VU27487 - Improper Certificate Validation CVE-2020-9488 |
CWE-295 | Low | 7.5.0 Update Pack 7 IF01 | 04.05.2020 |
SB2020050406 SB2020071606 SB2020071620 and 67 more |
Showing elements 1061 - 1080 out of 1402