Known vulnerabilities in IBM Qradar SIEM - page 56

Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Total vulnerabilities: 1424
Public exploits: 87
Known exploited (KEV): 24

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Qradar SIEM IBM Qradar SIEM is affected by 1424 known vulnerabilities: 8 critical, 141 high, 452 medium, 823 low Critical High Medium Low

Vulnerabilities (1424)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82572 - Improper Access Control
CVE-2023-43041
CWE-284 Low
No
No
7.5.0 Update Pack 7 IF01 30.10.2023 SB2023103068
#VU77646 - Authorization Bypass Through User-Controlled Key
CVE-2022-34352
CWE-639 Low
No
No
7.5.0 Update Pack 6, 7.5.0 Update Pack 7 IF01 22.06.2023 SB2023062275
SB2023103068
#VU72618 - Improper input validation
CVE-2023-24329
CWE-20 Medium
No
No
7.5.0 Update Pack 6, 7.5.0 Update Pack 7 IF01 28.02.2023 SB2023022819
SB2023022822
SB2023030832
and 158 more
#VU71586 - Out-of-bounds write
CVE-2022-40152
CWE-787 Medium
No
No
7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 26.01.2023 SB2023012669
SB2023012670
SB2023013124
and 52 more
#VU71473 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2022-4254
CWE-90 High
No
No
7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 24.01.2023 SB2023012437
SB2023012440
SB2023012457
and 13 more
#VU71332 - Improper input validation
CVE-2023-22809
CWE-20 Low
Available
No
7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 18.01.2023 SB20230118100
SB20230118104
SB20230118105
and 55 more
#VU71314 - Improper input validation
CVE-2022-40153
CWE-20 Medium
No
No
7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 18.01.2023 SB2023011841
SB2023012670
SB2023021321
and 21 more
#VU70444 - Server-Side Request Forgery (SSRF)
CVE-2022-46364
CWE-918 Medium
No
No
7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 20.12.2022 SB2022122009
SB2023011329
SB2023011707
and 67 more
#VU68827 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42890
CWE-94 Low
No
No
7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 30.10.2022 SB2022103004
SB2022103009
SB2023030742
and 34 more
#VU67811 - Out-of-bounds write
CVE-2022-2964
CWE-787 Low
No
No
7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 03.10.2022 SB2022100329
SB2022100331
SB2022102079
and 73 more
#VU65864 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-36364
CWE-94 Medium
No
No
7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 28.07.2022 SB2022072832
SB2022122706
SB2023062723
and 3 more
#VU64062 - Integer underflow
CVE-2022-28733
CWE-191 High
No
No
7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 08.06.2022 SB2022060810
SB2022061540
SB2022061566
and 38 more
#VU61566 - Exposure of sensitive information to an unauthorized actor
CVE-2021-26401
CWE-200 Low
No
No
7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 23.03.2022 SB2022032309
SB2022051728
SB2022051831
and 30 more
#VU59693 - Deserialization of Untrusted Data
CVE-2020-9493
CWE-502 High
No
No
7.5.0 Update Pack 7 IF01 18.01.2022 SB2021061626
SB2022011819
SB2022012640
and 62 more
#VU59692 - Deserialization of Untrusted Data
CVE-2022-23302
CWE-502 High
No
No
7.5.0 Update Pack 7 IF01 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 60 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305
CWE-89 Medium
No
No
7.5.0 Update Pack 7 IF01 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 94 more
#VU58977 - Deserialization of Untrusted Data
CVE-2021-4104
CWE-502 Medium
No
No
7.4.3 Fix Pack 7, 7.5.0 Update Package 3 Interim Fix 02, 7.5.0 Update Pack 7 IF01 15.12.2021 SB2021121507
SB2021121647
SB2021121720
and 119 more
#VU51511 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-13936
CWE-94 High
No
No
7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 16.03.2021 SB2021031618
SB2021072614
SB2022011911
and 45 more
#VU27960 - Deserialization of Untrusted Data
CVE-2019-17571
CWE-502 High
No
No
7.4.3 Fix Pack 7, 7.5.0 Update Package 3 Interim Fix 02, 7.5.0 Update Pack 7 IF01 18.05.2020 SB2019122027
SB2020051806
SB2020011497
and 28 more
#VU27487 - Improper Certificate Validation
CVE-2020-9488
CWE-295 Low
No
No
7.5.0 Update Pack 7 IF01 04.05.2020 SB2020050406
SB2020071606
SB2020071620
and 67 more


Showing elements 1101 - 1120 out of 1424