Known vulnerabilities in IBM Qradar SIEM - page 57

Vendor: IBM Corporation
Software: IBM Qradar SIEM
Software CPE: cpe:2.3:a:ibm_corporation:ibm_qradar_siem:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 1424
Public exploits: 87
Known exploited (KEV): 24

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Qradar SIEM IBM Qradar SIEM is affected by 1424 known vulnerabilities: 8 critical, 141 high, 452 medium, 823 low Critical High Medium Low

Vulnerabilities (1424)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71236 - Untrusted Search Path
CVE-2022-4883		 CWE-426 Low
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 17.01.2023 SB2023011734
SB2023011737
SB2023011806
and 38 more
#VU70527 - Improper input validation
CVE-2022-41966		 CWE-20 Medium
Available
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 28.12.2022 SB2022122822
SB2023011211
SB2023020616
and 53 more
#VU68859 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-42252		 CWE-444 Medium
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 31.10.2022 SB2022103146
SB2022112324
SB2022112533
and 43 more
#VU68844 - Type confusion
CVE-2022-3676		 CWE-843 Medium
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 31.10.2022 SB2022103129
SB2022111110
SB2022111724
and 60 more
#VU68437 - Improper input validation
CVE-2022-21628		 CWE-20 Medium
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 138 more
#VU68438 - Improper input validation
CVE-2022-21626		 CWE-20 Medium
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 157 more
#VU68441 - Improper input validation
CVE-2022-21624		 CWE-20 Low
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 142 more
#VU67545 - Resource Management Errors
CVE-2022-2795		 CWE-399 Medium
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 21.09.2022 SB2022092131
SB2022092140
SB2022092143
and 71 more
#VU66756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-36033		 CWE-79 Low
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 25.08.2022 SB2022082508
SB2022101893
SB2022111644
and 44 more
#VU66747 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-31197		 CWE-89 High
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 24.08.2022 SB2022082432
SB2022082543
SB2022090901
and 27 more
#VU65486 - Improper input validation
CVE-2022-24839		 CWE-20 Medium
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 20.07.2022 SB2022072038
SB2022102803
SB2022102807
and 31 more
#VU63127 - Resource exhaustion
CVE-2021-37136		 CWE-400 Medium
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 12.05.2022 SB2021101948
SB2022051235
SB2022060838
and 37 more
#VU62849 - Creation of Temporary File With Insecure Permissions
CVE-2022-24823		 CWE-378 Low
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 09.05.2022 SB2022050902
SB2022063002
SB2022072013
and 56 more
#VU62714 - Improper Initialization
CVE-2022-21724		 CWE-665 Medium
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 02.05.2022 SB2022050205
SB2022062202
SB2022062204
and 18 more
#VU61810 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-43797		 CWE-444 Medium
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 02.04.2022 SB2021120923
SB2022040202
SB2022042223
and 50 more
#VU61422 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2021-25220		 CWE-350 Medium
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 17.03.2022 SB2022031701
SB2022031719
SB2022031725
and 57 more
#VU59924 - Improper input validation
CVE-2021-37137		 CWE-20 Medium
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 23.01.2022 SB2022012310
SB2022012745
SB2022012753
and 44 more
#VU51837 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21409		 CWE-444 Medium
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 01.04.2021 SB2021040116
SB2021040626
SB2021050706
and 33 more
#VU51836 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21295		 CWE-444 Medium
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 01.04.2021 SB2021040115
SB2021040626
SB2021050706
and 27 more
#VU51835 - Cleartext Storage of Sensitive Information
CVE-2021-21290		 CWE-312 Low
No
No
 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5 01.04.2021 SB2021020813
SB2021040626
SB2021050706
and 43 more


Showing elements 1121 - 1140 out of 1424