Known vulnerabilities in IBM Qradar SIEM - page 54

Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Total vulnerabilities: 1402
Public exploits: 87
Known exploited (KEV): 24
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Qradar SIEM IBM Qradar SIEM is affected by 1402 known vulnerabilities: 8 critical, 140 high, 438 medium, 816 low Critical High Medium Low

Vulnerabilities (1402)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82994 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-43057
CWE-79 Low
No
No
7.5.0 Update Pack 7 IF02 10.11.2023 SB2023111090
SB2023111604
#VU81800 - Resource Management Errors
CVE-2023-42795
CWE-399 Medium
No
No
7.5.0 Update Pack 7 IF03 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU81799 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-45648
CWE-444 Medium
No
No
7.5.0 Update Pack 7 IF03 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
7.5.0 Update Pack 7 IF03 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU80931 - Resource exhaustion
CVE-2023-3341
CWE-400 Medium
No
No
7.5.0 Update Pack 7 IF02 20.09.2023 SB2023092048
SB2023092050
SB2023092148
and 90 more
#VU80792 - Improper input validation
CVE-2023-36479
CWE-20 Medium
No
No
7.5.0 Update Pack 7 IF03 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 48 more
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40167
CWE-444 Medium
No
No
7.5.0 Update Pack 7 IF03 14.09.2023 SB2023091440
SB2023092933
SB2023101760
and 68 more
#VU80523 - Out-of-bounds write
CVE-2020-22218
CWE-787 Medium
No
No
7.5.0 Update Pack 7 IF02 07.09.2023 SB2023090729
SB2023090732
SB2023090843
and 21 more
#VU80188 - Cryptographic Issues
CVE-2023-20900
CWE-310 Medium
No
No
7.5.0 Update Pack 7 IF02 31.08.2023 SB2023083119
SB2023083154
SB2023083155
and 38 more
#VU80019 - Server-Side Request Forgery (SSRF)
CVE-2022-44730
CWE-918 Medium
No
No
7.5.0 Update Pack 7 IF02 25.08.2023 SB2023082528
SB2023100208
SB2023100306
and 15 more
#VU80018 - Server-Side Request Forgery (SSRF)
CVE-2022-44729
CWE-918 Medium
No
No
7.5.0 Update Pack 7 IF02 25.08.2023 SB2023082528
SB2023100208
SB2023100306
and 25 more
#VU79878 - Incorrect Authorization
CVE-2023-3899
CWE-863 Low
No
No
7.5.0 Update Pack 7 IF02 23.08.2023 SB2023082308
SB2023082309
SB2023082310
and 44 more
#VU78572 - Use After Free
CVE-2023-20593
CWE-416 Low
No
No
7.5.0 Update Pack 7 IF02 24.07.2023 SB2023072428
SB2023072429
SB2023072553
and 134 more
#VU78326 - Out-of-bounds write
CVE-2023-35001
CWE-787 Low
Available
No
7.5.0 Update Pack 7 IF03 17.07.2023 SB2023071735
SB2023071736
SB2023072077
and 129 more
#VU77502 - Out-of-bounds write
CVE-2023-35788
CWE-787 Low
No
No
7.5.0 Update Pack 7 IF02 19.06.2023 SB2023061905
SB2023062942
SB2023062969
and 103 more
#VU75807 - Use After Free
CVE-2023-32233
CWE-416 Low
Available
No
7.5.0 Update Pack 7 IF03 09.05.2023 SB2023050923
SB2023051402
SB2023053054
and 100 more
#VU72618 - Improper input validation
CVE-2023-24329
CWE-20 Medium
No
No
7.5.0 Update Pack 6, 7.5.0 Update Pack 7 IF01 28.02.2023 SB2023022819
SB2023022822
SB2023030832
and 158 more
#VU59693 - Deserialization of Untrusted Data
CVE-2020-9493
CWE-502 High
No
No
7.5.0 Update Pack 7 IF01 18.01.2022 SB2021061626
SB2022011819
SB2022012640
and 62 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305
CWE-89 Medium
No
No
7.5.0 Update Pack 7 IF01 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 94 more
#VU27487 - Improper Certificate Validation
CVE-2020-9488
CWE-295 Low
No
No
7.5.0 Update Pack 7 IF01 04.05.2020 SB2020050406
SB2020071606
SB2020071620
and 67 more


Showing elements 1061 - 1080 out of 1402