Known vulnerabilities in IBM Qradar SIEM - page 56

Vendor: IBM Corporation
Software: IBM Qradar SIEM
Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 1402
Public exploits: 87
Known exploited (KEV): 24
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Qradar SIEM IBM Qradar SIEM is affected by 1402 known vulnerabilities: 8 critical, 140 high, 438 medium, 816 low Critical High Medium Low

Vulnerabilities (1402)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70666 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-45143		 CWE-94 Medium
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 03.01.2023 SB2023010329
SB2023012516
SB2023012606
and 34 more
#VU70527 - Improper input validation
CVE-2022-41966		 CWE-20 Medium
Available
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 28.12.2022 SB2022122822
SB2023011211
SB2023020616
and 53 more
#VU70443 - Exposure of sensitive information to an unauthorized actor
CVE-2022-46363		 CWE-200 Low
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 20.12.2022 SB2022122009
SB2023011707
SB2023012719
and 22 more
#VU69545 - Incorrect Default Permissions
CVE-2022-41946		 CWE-276 Low
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 23.11.2022 SB2022112335
SB2023010922
SB2023011025
and 42 more
#VU68859 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-42252		 CWE-444 Medium
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 31.10.2022 SB2022103146
SB2022112324
SB2022112533
and 43 more
#VU68826 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-41704		 CWE-94 High
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 30.10.2022 SB2022103004
SB2022103009
SB2023030742
and 14 more
#VU68437 - Improper input validation
CVE-2022-21628		 CWE-20 Medium
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 138 more
#VU68438 - Improper input validation
CVE-2022-21626		 CWE-20 Medium
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 157 more
#VU68441 - Improper input validation
CVE-2022-21624		 CWE-20 Low
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 142 more
#VU68442 - Improper input validation
CVE-2022-21619		 CWE-20 Low
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 140 more
#VU67545 - Resource Management Errors
CVE-2022-2795		 CWE-399 Medium
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 21.09.2022 SB2022092131
SB2022092140
SB2022092143
and 71 more
#VU65486 - Improper input validation
CVE-2022-24839		 CWE-20 Medium
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 20.07.2022 SB2022072038
SB2022102803
SB2022102807
and 31 more
#VU62849 - Creation of Temporary File With Insecure Permissions
CVE-2022-24823		 CWE-378 Low
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 09.05.2022 SB2022050902
SB2022063002
SB2022072013
and 55 more
#VU62714 - Improper Initialization
CVE-2022-21724		 CWE-665 Medium
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 02.05.2022 SB2022050205
SB2022062202
SB2022062204
and 18 more
#VU61422 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2021-25220		 CWE-350 Medium
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 17.03.2022 SB2022031701
SB2022031719
SB2022031725
and 57 more
#VU51837 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21409		 CWE-444 Medium
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 01.04.2021 SB2021040116
SB2021040626
SB2021050706
and 32 more
#VU51836 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21295		 CWE-444 Medium
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 01.04.2021 SB2021040115
SB2021040626
SB2021050706
and 26 more
#VU51835 - Cleartext Storage of Sensitive Information
CVE-2021-21290		 CWE-312 Low
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 01.04.2021 SB2021020813
SB2021040626
SB2021050706
and 42 more
#VU36773 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2018-15494		 CWE-74 High
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 18.08.2018 SB2018081804
SB2022070505
SB2022082433
and 11 more
#VU13547 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-8036		 CWE-835 Low
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 03.07.2018 SB2018070304
SB2018090711
SB2018102421
and 7 more


Showing elements 1101 - 1120 out of 1402