Known vulnerabilities in IBM Qradar SIEM - page 57
Vendor:
IBM Corporation
Software:
IBM Qradar SIEM
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
1402
Public exploits:
87
Known exploited (KEV):
24
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
7.5.0 Update Pack 15 IF04
7.5.0 Update Pack 15 IF03
7.5.0 Update Pack 15 IF02
7.5.0 Update Pack 15 IF05
7.5.0 Update Pack 15
7.5.0 Update Pack 15 IF01
7.5.0 Update Pack 10 IF03
7.5.0 Update Pack 14 IF05
7.5.0 Update Pack 14 IF04
7.5.0 Update Pack 14 IF02
7.5.0 Update Pack 14 IF03
7.5.0 Update Pack 14 IF01
7.5.0 Update Pack 14
7.5.0 Update Pack 13 IF02
7.5.0 Update Pack 13 IF01
7.5.0 UP12 IF02
7.5.0 UP12 IF03
7.5.0 Update Pack 13
7.5.0 Update Pack 12 IF01
7.5.0 Update Pack 12
7.5.0 Update Pack 12 IF03
7.5.0 Update Pack 12 IF02
7.5.0 Update Pack 11 IF04
7.5.0 Update Pack 11 IF03
7.5.0 Update Pack 11 IF02
7.5.0 Update Pack 11 IF01
7.5.0 Update Pack 11
7.5.0 UP10 IF02
7.5.0 UP10 IF01
7.5.0 UP10
7.5.0 UP9 IF03
7.5.0 UP9 IF02
7.5.0 UP9 IF01
7.5.0 UP9
7.5.0 UP8 IF03
7.5.0 UP8 IF02
7.5.0 UP8 IF01
7.5.0 UP8
7.5.0 UP7 IF06
7.5.0 Update Pack 7 IF05
7.5.0 Update Pack 7 IF04
7.5.0 Update Pack 7 IF03
7.5.0 Update Pack 7 IF02
7.5.0 Update Pack 7 IF01
7.5.0 Update Pack 7
7.5.0 Update Pack 6
7.5.0 Update Pack 5 IF02
7.5.0 Update Pack 5 IF01
7.5.0 Update Pack 5
7.4.3 Fix Pack 9
7.4.3 Fix Pack 8
7.5.0 Update Pack 4
7.5.0 Update Pack 3 Interim Fix 3
7.4.3 Fix Pack 7 Interim Fix 1
7.5.0 Update Package 3 Interim Fix 02
7.4.3 Fix Pack 7
7.5.0 Update Pack 3
7.5.0 Update Pack 2
7.4.3 Fix Pack 6
7.3.3 Fix Pack 12
7.4.3
7.4.3 Fix Pack 5
7.3.3 Fix Pack 11
7.3
7.3.3 Fix Pack 10 Interim Fix 02
7.3.3 Fix Pack 10 Interim Fix 01
7.4.3 Fix Pack 4 Interim Fix 04
7.4.3 Fix Pack 4 Interim Fix 03
7.4.3 Fix Pack 4 Interim Fix 02
7.4.3 Fix Pack 4 Interim Fix 01
7.5.0 Update Pack 1
7.5.0
7.4.2
7.4.1
7.4.0
7.3.3 Fix Pack 10
7.3.3 Fix Pack 9
7.3.3 Fix Pack 8
7.3.3 Fix Pack 7
7.3.3 Fix Pack 6
7.3.3 Fix Pack 5
7.3.3 Fix Pack 4
7.3.3 Fix Pack 3
7.3.3 Fix Pack 2
7.3.3 Fix Pack 1
7.3.1
7.3.3
7.3.2
7.4.3 Fix Pack 4
7.4.3 Fix Pack 3
7.4.3 Fix Pack 1
7.4.3 Fix Pack 2
7.4
7.3.1 Patch 7
7.3.1 Patch 6
7.3.1 Patch 5
7.2.8 Patch 14
7.2.8 Patch 13
7.3.1 Patch 4
7.3.0 Patch 7
7.3.0 Patch 6
7.3.0 Patch 5
7.3.0 Patch 4
7.3.0 Patch 3
7.3.0 Patch 2
7.3.0 Patch 1
7.2.8 Patch 12
7.3.1 Patch 3
7.2.8 Patch 11
7.2.8 Patch 10
7.2.8 Patch 9
7.2.8 Patch 8
7.2.8 Patch 7
7.2.8 Patch 6
7.2.8 Patch 5
7.2.8 Patch 4
7.2.8 Patch 3
7.2.8 Patch 2
7.2.8 Patch 1
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.3.1 Patch 2
7.3.1 Patch 1
7.3.0
Vulnerabilities (1402)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU81889 - Use of a Broken or Risky Cryptographic Algorithm CVE-2023-30994 |
CWE-327 | Medium | 7.5.0 Update Pack 7 | 11.10.2023 |
SB2023101151 |
||
| #VU79519 - Improper Control of Generation of Code ('Code Injection') CVE-2023-32697 |
CWE-94 | High | 7.5.0 Update Pack 7 | 15.08.2023 |
SB2023090805 SB2023090807 SB2023091411 and 7 more |
||
| #VU78454 - Untrusted Search Path CVE-2023-38408 |
CWE-426 | Medium | 7.5.0 Update Pack 7 | 20.07.2023 |
SB2023072068 SB2023072073 SB2023072074 and 73 more |
||
| #VU77612 - Resource exhaustion CVE-2023-2828 |
CWE-400 | Medium | 7.5.0 Update Pack 7 | 21.06.2023 |
SB2023062155 SB2023062201 SB2023062601 and 66 more |
||
| #VU77228 - Resource exhaustion CVE-2023-34149 |
CWE-400 | Medium | 7.5.0 Update Pack 7 | 13.06.2023 |
SB2023061351 SB2023070502 SB2023071316 and 7 more |
||
| #VU75486 - Improper input validation CVE-2023-29007 |
CWE-20 | Low | 7.5.0 Update Pack 7 | 25.04.2023 |
SB2023042553 SB2023042610 SB2023042629 and 48 more |
||
| #VU75484 - Improper Link Resolution Before File Access ('Link Following') CVE-2023-25652 |
CWE-59 | Low | 7.5.0 Update Pack 7 | 25.04.2023 |
SB2023042553 SB2023042610 SB2023042629 and 48 more |
||
| #VU75264 - Improper input validation CVE-2023-21939 |
CWE-20 | Medium | 7.5.0 Update Pack 7 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 179 more |
||
| #VU75266 - Improper input validation CVE-2023-21968 |
CWE-20 | Low | 7.5.0 Update Pack 7 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 179 more |
||
| #VU75267 - Improper input validation CVE-2023-21937 |
CWE-20 | Low | 7.5.0 Update Pack 7 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 184 more |
||
| #VU75260 - Improper input validation CVE-2023-21930 |
CWE-20 | Medium | 7.5.0 Update Pack 7 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 191 more |
||
| #VU75261 - Improper input validation CVE-2023-21967 |
CWE-20 | Medium | 7.5.0 Update Pack 7 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 189 more |
||
| #VU75262 - Improper input validation CVE-2023-21954 |
CWE-20 | Medium | 7.5.0 Update Pack 7 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 166 more |
||
| #VU75218 - Resource exhaustion CVE-2023-26048 |
CWE-400 | Medium | 7.5.0 Update Pack 7 | 18.04.2023 |
SB2023041842 SB2023051753 SB2023060701 and 55 more |
||
| #VU66748 - Improper Control of Generation of Code ('Code Injection') CVE-2020-5259 |
CWE-94 | Medium | 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 | 24.08.2022 |
SB20200310151 SB2022082433 SB2023031611 and 8 more |
||
| #VU63085 - Improper input validation CVE-2022-22971 |
CWE-20 | Medium | 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 | 12.05.2022 |
SB2022051201 SB2022060620 SB2022062223 and 52 more |
||
| #VU63084 - Improper input validation CVE-2022-22970 |
CWE-20 | Medium | 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 | 12.05.2022 |
SB2022051201 SB2022060620 SB2022062223 and 23 more |
||
| #VU60834 - Improper Control of Generation of Code ('Code Injection') CVE-2021-23450 |
CWE-94 | High | 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 | 23.02.2022 |
SB2022022311 SB2022022312 SB2022031011 and 41 more |
||
| #VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-23437 |
CWE-835 | Medium | 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 | 25.01.2022 |
SB2022012503 SB2022041946 SB2022042249 and 92 more |
||
| #VU25348 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-10785 |
CWE-79 | Low | 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 | 14.02.2020 |
SB2020021405 SB2022082433 SB2023040530 and 7 more |
Showing elements 1121 - 1140 out of 1402